MITRE ATT&CKcampaign
C0031 Unitronics Defacement Campaign
- Domain
- ics
- Version
- 1.0
- Created
- 2024-03-25
Description
The Unitronics Defacement Campaign was a collection of intrusions across multiple sectors by the CyberAv3ngers, where threat actors engaged in a seemingly opportunistic and global targeting and defacement of Unitronics Vision Series Programmable Logic Controller (PLC) with Human-Machine Interface (HMI). The sectors that these PLCs can be commonly found in are water and wastewater, energy, food and beverage manufacturing, and healthcare. The most notable feature of this attack was the defacement of the PLCs' HMIs.
Related
Attributed to · MITRE ATT&CK (1)
- G1027 CyberAv3ngers group
References
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a CISA AA23-335A IRGC-Affiliated December 2023
- https://apnews.com/article/hackers-iran-israel-water-utilities-critical-infrastructure-cisa-554b2aa969c8220016ab2ef94bd7635b Frank Bajak and Marc Levy December 2023
- https://veronews.com/2023/12/15/hackers-in-iran-attack-computer-at-vero-utilities/ Lisa Zahner December 2023