Old ScadaBR Flaw: Hackers’ Not-So-Grand Defacement Adventure!
Hackers defaced an industrial control system with an old OpenPLC ScadaBR flaw, CVE-2021-26829, now added to CISA’s Known Exploited Vulnerabilities catalog. Despite the attack’s lack of real-world impact, it highlights the appeal of targeting such systems with easy-to-exploit vulnerabilities. Remember, not all hackers are evil geniuses; some just want to leave their mark!
Hot Take:
**_Looks like the cyber baddies have discovered an oldie but a goodie! The forgotten ScadaBR vulnerability, CVE-2021-26829, is suddenly the star of the show thanks to some pro-Russia hacktivists who thought they were hacking into a real industrial control system. Spoiler alert: they were not._**
Key Points:
– CISA has added the ScadaBR flaw CVE-2021-26829 to its Known Exploited Vulnerabilities catalog.
– The vulnerability is a cross-site scripting (XSS) flaw patched in June 2021.
– The hacktivist group TwoNet exploited the vulnerability in a fake ICS setup, thinking it was the real deal.
– The attack only resulted in a defacement, indicating limited hacking skills.
– No significant real-world impact was observed, but it highlighted the potential for future attacks.