Iranian hackers suspected in cyberattack against over 30 Minnesota water systems - report

Iranian hackers are suspected of being behind a cyberattack that targeted more than 30 municipal water systems in Minnesota earlier this week. The attacks reportedly took place on Sunday and Monday, prompting responses from government and municipal agencies, though no specific instructions were issued to residents regarding their drinking water use.

According to The Washington Post, citing unnamed US officials, the Cybersecurity and Infrastructure Security Agency (CISA) had previously warned of a significant increase in cyber threats targeting programmable logic controllers (PLCs) within the Water and Wastewater Systems (WWS) Sector. Experts note that similar attacks have been occurring against water and energy systems across the United States since the start of the conflict with Iran.

“

It is not a secret that these things have been taking place since the spring.

Kurt Gaudette, head of intelligence for Dragos, indicated that these cyberattacks have often targeted "very low-hanging fruit," such as vulnerable systems in small utilities that use default passwords and have internet-accessible controllers. This suggests a pattern of exploiting easily accessible weaknesses in critical infrastructure.

Alex Orleans, head of threat intelligence at Sublime Security, suggested that Iran's primary objective appears to be psychological impact rather than outright destruction. The hackers aim to create public fear and potentially turn American sentiment against the war by highlighting perceived vulnerabilities and costs. Additionally, Orleans posited that these actions serve to demonstrate the hackers' contribution to the war effort to their superiors within the Iranian regime.

“

They want to show their bosses that they’re contributing to the war effort.