美国多州的水务系统遭遇协调网络攻击。[1]美国联邦调查局警告称,七个州报告了网络攻击事件,其中部分活动对水务运营造成了破坏。[1]美国网络安全机构CISA正在调查伊朗可能与此次攻击的关联。[1]
网络安全专家认为,此次攻击与Handala黑客组织有关,该组织与伊朗伊斯兰共和国情报安全部(MOIS)存在联系。[1]伊朗尚未就此事发表评论,但该国历来否认参与类似网络攻击。[1]2023年,伊朗曾被控攻击美国水处理系统,导致宾夕法尼亚州两个镇的水压调节设备临时关闭。[1]
针对此次威胁,CISA建议水系统立即与互联网断开连接并重置密码。[1]美国拥有152,000个公共饮用水系统和超过16,000个污水处理设施。[1]
Coordinated cyberattacks have compromised water systems across seven US states, including Minnesota and six others, disrupting operations at multiple facilities [1]. The FBI has warned that the attacks damaged water utility operations in these seven states [1]. US cybersecurity authorities are investigating a potential link to Iran, with security experts suggesting the Handala hacking group may be connected to Iran's Ministry of Intelligence and Security (MOIS) [1].
Iran has not commented on the allegations, though the country has historically denied involvement in similar cyberattacks [1]. This incident follows a 2023 incident in which Iran was accused of attacking a US water treatment system, temporarily disabling water pressure regulation equipment in two Pennsylvania towns [1]. The US Cybersecurity and Infrastructure Security Agency (CISA) has advised water systems to immediately disconnect from the internet and reset passwords [1].
The scope of potential vulnerability in US water infrastructure is significant, with the country operating approximately 152,000 public drinking water systems and more than 16,000 wastewater treatment facilities [1].