

148. They’re just hackers, living off the land
Jul 16, 2024
Exploring 'Living off the Land' attacks on industrial systems, hackers leveraging existing network components without leaving traces. Discussion on SCADA systems' vulnerability and indictment regarding remote control software. Russian hackers targeting Ukrainian power grid with cyber attacks and the intersection of missile strikes and cyber attacks in Ukraine.
AI Snips
Chapters
Transcript
Episode notes
Discovery Bay SCADA Hack Incident
- Discovery Bay's water treatment SCADA system was hacked and erased, causing blank screens for operators.
- They detected an attack without damage, alerting experts like Joe Weiss to living off the land hacking risks.
Security vs. Accessibility Conflict
- Integrating many vendors in industrial controls raises security risks due to broad accessibility.
- Cybersecurity demands opposite principles: reduce access to protect infrastructure, clashing with engineering design.
Living Off The Land Attacks Explained
- Living off the land attacks use legitimate system tools to stealthily manipulate industrial controls.
- Changes appear normal, so attackers can cause serious problems unnoticed until too late.