MITRE ATT&CKcampaign

C0031 Unitronics Defacement Campaign

Published 2024-03-25 Modified 2026-07-31 Official page ↗
Domain
ics
Version
1.0
Created
2024-03-25

Description

The Unitronics Defacement Campaign was a collection of intrusions across multiple sectors by the CyberAv3ngers, where threat actors engaged in a seemingly opportunistic and global targeting and defacement of Unitronics Vision Series Programmable Logic Controller (PLC) with Human-Machine Interface (HMI). The sectors that these PLCs can be commonly found in are water and wastewater, energy, food and beverage manufacturing, and healthcare. The most notable feature of this attack was the defacement of the PLCs' HMIs.

Related

Attributed to · MITRE ATT&CK (1)

  • G1027 CyberAv3ngers group

Uses · MITRE ATT&CK (6)

  • T1694.001 Default Credentials sub-technique
  • T0814 Denial of Service technique
  • T0826 Loss of Availability technique
  • T0828 Loss of Productivity and Revenue technique
  • T0829 Loss of View technique
  • T0883 Internet Accessible Device technique

References