Tag Archive for: Poison

Hacker tried to poison Florida city’s water supply — GCN

/in


water treatment plant (People Image Studio/Shutterstock.com)

Hacker tried to poison Florida city’s water supply

  • By Susan Miller
  • Feb 09, 2021

As an employee at a water treatment plant watched, a hacker took control of his computer and changed chemical controls to dump lye into the drinking water of Oldsmar, Fla., a city of 15,000 near Tampa.

At about 8 a.m. on Feb. 5, a worker at the Oldsmar water treatment plant noticed that his computer was being remotely accessed by TeamViewer, a popular desktop control application that allows IT staff and supervisors to monitor operations and troubleshoot enterprise computers in remote locations. The worker “didn’t think much of it,” Pinellas County Sheriff Bob Gualtieri said at a Feb. 8 news conference, because such remote access was not unusual.

The intruder returned later that same day, moving the employee’s mouse to open functions that control water treatment protocols, including one that adjusts the amount of sodium hydroxide, or lye, in the water. The hacker changed that level from about 100 parts per million to 11,100 parts per million, potentially endangering Oldsmar residents. Fortunately, the operator who was watching the intruder’s movements immediately reduced the chemical to the appropriate level and notified a supervisor.

Such attacks on utility control systems are not unusual, according to Lesley Carhart, a principal threat analyst at Dragos, an industrial control system security firm. Carhart told Wired that even unsophisticated hackers can find thousands of connected systems with tools like Shodan, a search engine that lets users find specific types of internet-connected devices.

According to Carhart, water treatment and sewage plants are vulnerable targets, especially during the pandemic when some workers are remote and IT staff are under-resourced. It’s usually the complexity and redundancies built into industrial control systems that prevent hackers from causing serious consequences, she said.

Oldsmar’s water treatment plant has several redundancies in place to catch unexpected changes.

“If you change the…

Source…

Someone tried to poison Florida city’s water supply during hack, sheriff says

/in


TAMPA, Fla. — Local and federal authorities are investigating after an attempt Friday to poison the city of Oldsmar’s water supply, Pinellas County Sheriff Bob Gualtieri said.



a couple of people that are standing in a room: Pinellas County Sheriff Bob Gualtieri speaks at a press conference Monday, Feb. 8, 2021, along with Oldsmar Mayor Eric Seidel, left.

© Pinellas County Sheriff’s Office/TNS
Pinellas County Sheriff Bob Gualtieri speaks at a press conference Monday, Feb. 8, 2021, along with Oldsmar Mayor Eric Seidel, left.

Someone remotely accessed a computer for the city’s water treatment system and briefly increased the amount of sodium hydroxide, also known as lye, by a factor of more than 100, Gualtieri said at a news conference Monday. The chemical is used in small amounts to control the acidity of water but it’s also a corrosive compound commonly found in household cleaning supplies such as liquid drain cleaners.

The city’s water supply was not affected. A supervisor working remotely saw the concentration being changed on his computer screen and immediately reverted it, Gualtieri said. City officials on Monday emphasized that several other safeguards are in place to prevent contaminated water from entering the water supply and said they’ve disabled the remote-access system used in the attack.

The Pinellas County Sheriff’s Office is investigating, along with the FBI and the Secret Service, Gualtieri said.

Nobody has been arrested, Gualtieri said, though investigators have some leads. They do not know why the city of Oldsmar was targeted, he said. He added that other area municipalities have been alerted to the attack and encouraged to inspect the safeguards to their water treatment systems and other infrastructure.

Though some cities obtain water through Pinellas County, Oldsmar provides water directly to its businesses and roughly 15,000 residents, Gualtieri said. The computer system at the water treatment plant was set up to allow authorized users to remotely access it for troubleshooting.

A plant operator was monitoring the system at about 8 a.m. EST Friday and noticed that someone briefly accessed it. He didn’t find this unusual, Gualtieri said, because his supervisor remotely accessed the system regularly.

But at about 1:30 p.m. the same day, Gualtieri said, someone accessed the system again. This time, he said, the…

Source…

Hacker tries to poison water supply of Florida city – BBC News

/in



Hacker tries to poison water supply of Florida city  BBC News

Source…

“Chickens**t” whistleblower firings are “poison,” resigning Amazon VP says

/in
Amazon's orange-yellow logo wall.

Enlarge / Amazon’s orange-yellow logo wall. (credit: David Ryder/Getty Images)

Amazon VP Tim Bray, who had been with the company for more than five years, has resigned in protest of Amazon’s treatment of warehouse workers and the firing of other employees who spoke out.

The company fired multiple warehouse and office workers in recent weeks amid organizing efforts to improve conditions in the company’s distribution centers, where individuals have contracted COVID-19. Firing the whistleblowers is “evidence of a vein of toxicity running through the company culture,” Bray said in a blog post explaining his departure. “I choose neither to serve nor drink that poison.”

Bray was one of several thousand Amazon tech workers who joined together in 2019 as Amazon Employees for Climate Justice, he said. Warehouse workers this year reached out to that group for support, as it was already organized. Members of AECJ then put their heft behind the warehouse workers’ push, organizing a large video conference for Thursday, April 16, as part of those efforts.

Read 6 remaining paragraphs | Comments

Biz & IT – Ars Technica