Container ships easy to hack, track, send off course and even sink, security experts say

guest · Jun 5, 2018

Container ships easy to hack, track, send off course and even sink, security experts say
June 5, 2018
https://securityledger.com/2018/06/...ff-course-and-even-sink-security-experts-say/

PTP researchers applied expertise in IoT, automotive and SCADA hardware security to a Cobham (Thrane & Thrane) Fleet One satellite terminal and demonstrated various methods of intrusion this week at Infosecurity Europe, as well as published their findings online.
Lack of basic security on ships
One reason it’s so easy to hijack the satellite communications of a ship and take admin rights on the on-board terminal is that many terminals are available on the public Internet and have default credentials “admin/1234” or “admin/12345,” which are obviously quite common and easy to guess, Munro said.

Moreover, the team also could edit the entire web application running on the terminal, something that also can be leveraged in attacks. Hackers with a bit of access also could elevate their privileges by installing an older, more vulnerable version of the firmware because there was no rollback protection for it, Munro said.
‘Crazy security flaws’ present in systems
In the more than 20 different ECDIS units the PTP team tests, they found “all sorts of crazy security flaws,” including the running of ancient operating systems like Windows NT, he said. [...]
Click to expand...

Minimalist · Jun 26, 2018

Simple Security Flaws Could Steer Ships Off Course

A proof-of-concept attack could cause ships to dangerously veer off course, and it all stems from simple security issues, including the failure to change default passwords or segment networks.

Researcher Ken Munro, with Pen Test Partners, on Monday showed how the attack could work and how it’s possible to manipulate a ship’s steering, propulsion, ballast and navigation data. The attack focused on targeting the devices that serve as a “bridging point” between the operational technology (OT) and IP networks.
Click to expand...

https://threatpost.com/simple-security-flaws-could-steer-ships-off-course

Log in or Sign up

Container ships easy to hack, track, send off course and even sink, security experts say

guest Guest

Minimalist Registered Member

Log in or Sign up

Container ships easy to hack, track, send off course and even sink, security experts say

guest Guest

Minimalist Registered Member

Useful Searches