Florida Water Plant Targeted With Cyberattack

Share post:

According to security firm Dragos, an employee in Oldsmar, Florida, visited a malicious website targeting water utilities on May 18, just hours before a person entered the city’s water treatment plant and tried to poison the drinking water.

The site did not play a role in the incident, but the situation was worrying, the security firm said.

“Watering-hole attacks” have become relatively common in computer hacking crimes targeting specific industries and users.

Florida is often a target.

The site is owned by a water utility in Florida and was compromised in December by hackers with malicious code targeting water utilities.

During the 58 days the site was infected, more than 1,000 computers visited the site.

One visit by an unauthorized person used the site to adjust chemicals that treat drinking water for about 15,000 residents of a small town northwest of Tampa.

The change was immediately recognized and canceled.

According to Dragos, the malicious code collected more than 100 pieces of detailed information about visitors.

Information such as CPU type, operating system, browser, time zone, and geolocation were just a few examples of information that the code could access.

The code also led visitors to two different websites that collected cryptographic hashes that uniquely identified each connecting device and uploaded fingerprints to a database.

Although the safety flaws did not cause extreme damage, as the majority of the attacks were caught immediately, Dragos researcher Kent Backman said this should be a wake-up call for water plants.

For more information, read the original story in arstechnica. 

Featured Tech Jobs

SUBSCRIBE NOW

Related articles

Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and passw

Google Play introduces new biometric verification with a user warning

Google has recently announced updates to the biometric verification process for Google Play purchases, aiming to bolster security...

Cyber Security Today, Week in Review for week ending Friday April 19, 2024

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT d

Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways