Threats posed by using RATs in ICS

guest · Sep 22, 2018

Threats posed by using RATs in ICS
September 20, 2018
https://securelist.com/threats-posed-by-using-rats-in-ics/88011/

While conducting audits, penetration tests and incident investigations, we have often come across legitimate remote administration tools (RAT) for PCs installed on operational technology (OT) networks of industrial enterprises. In a number of incidents that we have investigated, threat actors had used RATs to attack industrial organizations.
The use of RATs in ICS
According to KSN data, in the first half of 2018, legitimate RATs (programs categorized as not-a-virus: RemoteAdmin) were installed and used on one ICS computer in three.

The statistics support our observations: RATs are indeed often used on OT networks of industrial enterprises. We believe this could be due to attempts to reduce costs associated with maintaining ICS and minimize the response time in the event of malfunction.

[...] RATs, along with other legitimate tools, are increasingly used by attackers to mask malicious activity and make attribution more difficult.
Click to expand...

Log in or Sign up

Threats posed by using RATs in ICS

guest Guest

Log in or Sign up

Threats posed by using RATs in ICS

guest Guest

Useful Searches