Cyberattack Inflicts Massive Damage on German Steel Factory

A report from Germany’s Federal Office for Information Security (BSI) describes a targeted APT-style cyber-physical attack on a German steelworks that caused massive physical damage. Attackers used spear-phishing and social engineering to compromise office systems, moved laterally into production networks, and deployed malicious code that disrupted control system components, preventing a blast furnace from being turned off in a regulated fashion.