Cybercrims go beyond stealing data to attack physical building systems
'Hold my beer, have fun getting into your offices'
Late Sunday night, a yet-to-be identified cybercriminal or group breached thousands of remote-controlled refrigeration systems in hundreds of French grocery stores. The result was skyrocketing temperatures, spoiled food, and fires. This incident represents a growing trend of attacking physical systems that can cause real-world damage.
In August, a ransomware attack disrupted building-management systems at a Canadian hospital, affecting door access, central HVAC monitoring, and staff access cards. Three years ago, cyberattacks hit Las Vegas casinos, causing slot machines to malfunction, preventing cash withdrawals, and locking guests out of their rooms when electronic keys stopped working.
While digital intrusions remain in cyberspace, attackers can cause chaos by targeting physical systems. The consequences are often more severe than data theft, and attackers may demand extortion payments.
Tim Beasley, a senior incident response consultant at Semperis, recounted an experience where a customer refused to pay the ransom. In response, the threat actor locked everyone out of the building, forcing police to break in and restore access. Beasley emphasized that the customer did not pay the ransom.
A report by ServiceNow’s Armis Labs highlights the increasing trend of ransomware attackers using physical consequences as leverage in their intrusions. Building automation systems (BAS) - responsible for controlling HVAC, lighting, energy usage, water consumption, and safety equipment - are particularly attractive targets for ransomware operators seeking high-pressure extortion. Furthermore, 91% of BAS communicate over insecure protocols, expanding the attack surface for cybercriminals.
Security through obscurity is becoming obsolete, as AI makes it easier for attackers to uncover vulnerabilities in building automation systems. These systems often operate with fewer security controls than IT systems, making them harder to patch or scan for vulnerabilities. Additionally, attackers are increasingly leveraging AI to understand obscure operating systems and proprietary hardware/software, enabling them to execute devastating cyberattacks on critical networks and facilities.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
