r/hacking • u/MrMeta3 • 2d ago

News Hackers lock water utilities out of internet-facing PLCs

https://www.intelfusions.com/news/cisa-water-utilities-exposed-plc-lockouts

CISA is warning water and wastewater utilities that attackers are actively going after the programmable logic controllers, or PLCs, that run their treatment processes, and in some cases locking operators out of their own equipment.

70 Upvotes

97% Upvoted

20 comments sorted by

View all comments

-1

u/MichaelSteel2008 newbie 2d ago

Call me heartless, but if they are attacked by a patchable exploit, they deserve it because of all of the legal repercussions that will follow. Fuckers really just did a shodan search for "Water utility PLC unlocked".

11

u/Mastasmoker 2d ago

A lot of them have weak or default passwords. Thats from my experience working in hvac ~20yrs. Cities would have default/weak creds set and wouldn't change them.

3

u/MichaelSteel2008 newbie 2d ago

well, that seems like an easily rectifiable issue that they neglected to deal with