Iranian Hackers Target US Water & Power Grids

The FBI and NSA are raising significant concerns about Iranian hackers targeting the United States' critical infrastructure. These cyber threats specifically focus on essential services such as water, energy, and local municipalities. The hackers are actively exploiting vulnerabilities in industrial control systems, particularly programmable logic controllers (PLCs), to achieve their objectives.

Recent successful attacks have already resulted in diminished PLC functionality, manipulation of data, and, in some instances, operational disruption and financial losses. These sophisticated attacks leverage specific programming software to gain unauthorized access to targeted devices, including those from Rockwell Automation. The US agencies are urging all critical infrastructure operators to strengthen their defenses against these ongoing threats.

This wave of attacks follows a previous suspected Iranian campaign in 2023 that impacted a water provider in Pennsylvania. Additionally, a hacktivist group named Handala, identified by the FBI as an Iranian operation, has been spreading propaganda by infiltrating systems, including a medical equipment provider and even the FBI Director's personal accounts. The US agencies have identified specific IP addresses recently used in these ongoing cyber campaigns.