May 20, 2021
According to security firm Dragos, an employee in Oldsmar, Florida, visited a malicious website targeting water utilities on May 18, just hours before a person entered the city’s water treatment plant and tried to poison the drinking water.
The site did not play a role in the incident, but the situation was worrying, the security firm said.
“Watering-hole attacks” have become relatively common in computer hacking crimes targeting specific industries and users.
Florida is often a target.
The site is owned by a water utility in Florida and was compromised in December by hackers with malicious code targeting water utilities.
During the 58 days the site was infected, more than 1,000 computers visited the site.
One visit by an unauthorized person used the site to adjust chemicals that treat drinking water for about 15,000 residents of a small town northwest of Tampa.
The change was immediately recognized and canceled.
According to Dragos, the malicious code collected more than 100 pieces of detailed information about visitors.
Information such as CPU type, operating system, browser, time zone, and geolocation were just a few examples of information that the code could access.
The code also led visitors to two different websites that collected cryptographic hashes that uniquely identified each connecting device and uploaded fingerprints to a database.
Although the safety flaws did not cause extreme damage, as the majority of the attacks were caught immediately, Dragos researcher Kent Backman said this should be a wake-up call for water plants.
For more information, read the original story in arstechnica.
