Plan ahead High Monitor
Handala hacktivist group threatens Israeli water and power sites
The Jerusalem Post (via Google News)water, energy
What happened. The Jerusalem Post reports that the hacktivist group Handala has threatened Israel's water and power sites. The report gives no detail on methods, targets or any attack.
Who is affected. Water and power sites in Israel, according to the threat. The source does not say which organisations are affected.
What to do. Review remote access and internet exposure of HMIs and control systems, and brief your team on the threat.
When to act. Plan ahead: Water and power operators: hacktivist threats reported against Israeli sites; check remote access and HMIs.
Editor's reading
Forasset ownerOT security leaddetection engineer
- Purdue level
- L3.5
- L2
Why: Water and power control systems rely on HMIs (L2) and remote-access paths (L3.5), which hacktivists commonly try to reach. The report names none specifically.
- Are you exposed?
Check whether any HMI, SCADA or remote-access service at your water or power sites is reachable from the internet.
- If you cannot fix it yet
- Take HMIs and remote-access services off the internet, or place them behind a VPN with multi-factor authentication.
- Limit who can connect remotely to plant systems and review accounts.
- Watch for
- Logons to HMIs or SCADA servers from unusual sources or outside normal hours.
- Repeated failed logons or scans against internet-facing remote-access services.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: The Jerusalem Post (via Google News) (opens news.google.com)
More on Water and wastewater Energy and power