Iranian Cyberattacks Against Critical Infrastructure
Brief
The attacks appear to have targeted operational technology (OT) devices like programmable logic controllers (PLCs). A warning from FBI specifically mentioned Rockwell Automation and Allen-Bradley PLCs – particularly the MicroLogix 1100 and 1400 series – although systems using PLCs from other brands were also advised to be cautious. [1]
Assessment
Based on available information, it appears that these attacks have been mostly unsophisticated and opportunistic attacks targeting relatively small plants with minimum security, likely having OT devices exposed to the internet without proper protection. Given the limited impact of these attacks, it appears they were mostly aimed at creating psychological impact rather than real damage.