Another worry for water systems: infostealer exposure
Brief
Nearly two of every 10 U. S. water and wastewater organizations have identity data actively exposed from infostealers harvesting their credentials, according to research published Tuesday.
The study from identity risk firm SpyCloud follows months of reports about a wave of cyberattacks hitting targets in the sector , which U. S. government officials suspect are tied to Iran.
The company built a database of 66,845 Environmental Protection Agency-registered systems, examined internet domains and ultimately analyzed 10,000 organizations, finding that 1,787 showed active infostealer exposure.
In one case, a single infected device at a smart meter technology provider that SpyCloud didn’t name contained saved logins linked to roughly 167 different U. S. utility metering tenants — meaning that one exposure opened the door to many more.