Another worry for water systems: infostealer exposure
SpyCloud study finds nearly 20% of U.S. water/wastewater organizations have active infostealer credential exposure.
A SpyCloud study found that nearly 20% of U.S. water and wastewater organizations have active identity data exposure from infostealer malware, with 1,787 of approximately 10,000 analyzed organizations affected. In one case, a single infected device at a smart meter technology provider exposed saved logins for 167 different U.S. utility metering tenants, demonstrating significant cascading supply chain risk. The exposed credentials, including session cookies and passwords, could allow attackers to bypass multifactor authentication and gain access to critical systems.
- SpyCloud study found nearly 20% of U.S. water/wastewater organizations have active infostealer credential exposure.
- A single infected device at a vendor exposed credentials for 167 utility metering tenants.
- Exposed data includes session cookies and credentials that can bypass multifactor authentication.
- The research follows reports of cyberattacks on water systems potentially linked to Iran.
- Organizations
- SpyCloud
- Countries
- United States
From the original article
3 min read at cyberscoop.com
SpyCloud’s study found 1,787 of the approximately 10,000 U. S. organizations had it, including one infected device that saved logins for 167 utility metering tenants.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.