Details Emerge on Iranian Railroad Cyberattack

guest · Jul 19, 2021

Details Emerge on Iranian Railroad Cyberattack
July 19, 2021
https://www.securityweek.com/details-emerge-iranian-railroad-cyberattack

More details on the cyberattack on Iran’s railroad system emerged over the weekend. On Friday, July 9, 2021 Iran International reported that a system-wide disruption of Iran’s railroads was probably due to a cyberattack, citing the Revolutionary Guard-backed FARS news agency. Now it appears that the attackers had penetrated the system at least a month earlier.

The first report explained that hundreds of operations on the railroads had been delayed or cancelled with thousands of passengers stranded. The Iranian national railroad website was unavailable, but it isn’t clear whether it was taken down by the authorities or the hackers.
Click to expand...

On Sunday July 16, 2021, Iran International reported further details on the railroad attack from “an information security office at the presidential administration.” The attackers apparently penetrated the system in early June, and had been preparing the payloads from late June onwards.

The attack vector seems to be inadequate security from users working from home and not observing security protocols, but was exacerbated by “existing weaknesses in the systems, not guarding passwords, not updating antivirus software and insufficient investment in cyber security.”
Click to expand...

Once the attackers had gained access, they began changing the loading protocols and user passwords. They also prevented the ability of admins to access the system remotely, and they disabled recovery systems.
Click to expand...

Log in or Sign up

Details Emerge on Iranian Railroad Cyberattack

guest Guest

Log in or Sign up

Details Emerge on Iranian Railroad Cyberattack

guest Guest

Useful Searches