Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Iranian Hackers Manipulate SCADA Displays After Breaching U.S. Critical Infrastructure PLCs
Excerpt
U.S. federal agencies have issued an urgent warning that Iranian-affiliated threat actors are targeting internet-exposed programmable logic controllers (PLCs) used across critical infrastructure. The activity has disrupted industrial operations by tampering with PLC project files and altering information shown to operators through human-machine interface (HMI) and supervisory control and data acquisition (SCADA) systems. The joint advisory, AA26-097A, was updated on July…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 175.110.121.42 | High | Score 68/100 | First seen |
| IP | 141.11.164.153 | High | Score 68/100 | First seen |
| IP | 185.82.73.175 | High | Score 72/100 | First seen |
IOC Relationship Graph
Building graph…