美国明尼苏达州超过30个水系统在本周日和周一遭遇网络攻击。[1][2]其中布拉罕镇的供水中断约两小时后恢复,该市曾要求居民在数小时内节约用水。[1][2]FBI、网络安全与基础设施安全局(CISA)等机构正在调查此事,尚未正式确认攻击者身份,但攻击手法与美国政府指控受德黑兰控制的黑客组织CyberAv3ngers一致。[1][2]
美国当局高度怀疑伊朗黑客所为。[2]CISA于7月22日曾发布警告称伊朗网络行为者继续针对美国水和污水处理系统的在线控制系统发动攻击。[1][2]前FBI网络部副助理主任Cynthia Kaiser表示:"我认为最可信的研究人员和应对者应该有理由认为这是伊朗所为,除非另有证明。"[1]FBI网络部门助理主任Brett Leatherman则指出:"伊朗网络行为者继续针对美国关键基础设施,FBI致力于识别、破坏和对责任人施加成本。"[2]
这不是伊朗黑客今年首次针对美国基础设施的攻击。[2]美国司法部曾于2016年指控伊朗黑客针对纽约市附近一座小型水坝发动过网络攻击。[1]今年3月,据称由伊朗政府操纵的Handala Hack组织声称对医疗设备供应商Stryker和数字支付平台Verifone的网络攻击负责。[2]
More than 30 water systems across Minnesota were targeted in cyberattacks that occurred on Sunday and Monday.[1][2] The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency (CISA) are investigating the incidents, though the identity of the attackers has not been officially confirmed.[1] However, U.S. officials suspect Iranian-backed hackers are responsible, with attack methods aligning with tactics attributed to the Iranian government-linked group CyberAv3ngers.[2]
The city of Brainerd experienced a water supply interruption lasting approximately two hours before service was restored.[2] Federal authorities had warned of heightened Iranian cyber threats days earlier, with CISA issuing an alert on July 22 about Iranian-affiliated organizations targeting U.S. critical infrastructure control systems.[2] Experts point to historical precedent: the U.S. Department of Justice charged Iranian hackers in 2016 with attacking a small water dam near New York City.[1] Cynthia Kaiser, former deputy assistant director of the FBI's cyber division, stated: "I think the most credible researchers and responders would have reason to believe this was Iran, absent evidence to the contrary."[1] Brett Leatherman, an assistant director of the FBI's cyber branch, emphasized that "Iranian cyber actors continue to target U.S. critical infrastructure," and pledged that the agency is "committed to identifying, disrupting, and imposing costs on the responsible parties."[2] This latest attack represents a continuation of Iranian cyber operations against American water and sanitation infrastructure this year.[2]