FBI Issued Alert over July Attack on HVAC System
ID: 28fdeb20-3756-5ead-af6b-b1768d1423f6
STIX ID: report--28fdeb20-3756-5ead-af6b-b1768d1423f6
Feed Name: Security Ledger
Threat Score
The FBI issued an alert after unknown attackers used Shodan to find an internet-exposed Tridium Niagara AX HVAC control system at a New Jersey company, logged in via a publicly disclosed backdoor administrative account, and accessed the control GUI; ICS-CERT and Tridium released advisories and patches for vulnerabilities (credential file disclosure, directory traversal, weak session/session ID generation) affecting many installed systems worldwide.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.