🕵️ RESEARCH & DEEP DIVES
- US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices — SecurityWeek
Iranian hackers have targeted Siemens, Schneider Electric, and Rockwell Automation ICS devices.- Targets: Industrial Control Systems (ICS) from Siemens S7-1200, Schneider Electric Modicon M340, Rockwell Automation CompactLogix and Micro850
- Sectors impacted: Government services, facilities, energy, water and wastewater
- Attack method: Use of malicious PLC project files delivered via manufacturers’ programming software and third-party infrastructure
- Techniques: Modification and deletion of PLC logic, manipulation of HMI and SCADA data, disabling shutdown and alarm logic
- Ports targeted: 44818, 2222, 102, 502, and 22; software used includes Studio 5000 Logix Designer, EcoStruxure Control Expert, and Siemens TIA Portal