Shit Wizard 420

The new order comes amid several reported cyberattacks on U.S. water systems, which officials suspect have links to Iran, according to The New York Times.

I know the article isn’t saying it’s the same, but I wanted to add a clarification that the FBI had said the attacks were only noted in Rockwell Automation/Allen-Bradley Programmable Logic Controllers (PLCs), specifically MicroLogix 1100 and 1400 series.

After remotely accessing internet-facing devices, the actors changed the IP addresses and passwords, resulting in a loss of monitoring and control functionality.

There have been PLC attacks that resulted from a compromised device being installed but these appear to be about poor security practices.

Someone is in TROUBLE:

At least one organization reported modified PLC project files after noticing ladder logic discrepancies across several sites.

There is literally a physical key you have to turn to change the program. For example: