Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks

Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks

September 26, 2024 at 07:55AM

The US cybersecurity agency CISA warns of unsophisticated hacks on industrial control systems (ICS) and operational technology. Red Evil hacktivist group claimed to have compromised water systems used by Hezbollah, making exaggerated claims of control. However, an expert believes this is more likely an influence/misinformation operation. CISA also issued a warning about ICS/OT exploitation.

Based on the meeting notes, it seems that there have been claims by a pro-Israel hacktivist group, Red Evil, stating that they compromised water systems used by Hezbollah in Lebanon. The group claimed to have taken control of supervisory control and data acquisition (SCADA) software associated with 14 water facilities and managed to change chlorine levels, suggesting their goal was to cause harm.

However, there are doubts regarding the credibility of these claims. Concerns have been raised about the authenticity of the screenshots posted by the hackers and the feasibility of their alleged actions. Michael Langer, the chief product officer at Radiflow, has expressed skepticism about the actual impact of the claimed attacks and suggested that it is more likely an influence/misinformation operation.

Additionally, there are reports of CISA warning about the exploitation of industrial control systems (ICS) and operational technology (OT) through unsophisticated means, including in the water sector. This cautionary note follows an attack targeting a water treatment facility in Arkansas City, Kansas, which was forced to switch to manual operations but did not suffer any disruptions to service.

It is important to note that while there are claims of potential attacks on ICS and OT systems, there are also doubts about the real impact and feasibility of such endeavors. This emphasizes the need for organizations to review and enhance their cybersecurity measures, particularly in critical infrastructure sectors.

Full Article