Florida Water Plant Targeted With Cyberattack

According to security firm Dragos, an employee in Oldsmar, Florida, visited a malicious website targeting water utilities on May 18, just hours before a person entered the city’s water treatment plant and tried to poison the drinking water.

The site did not play a role in the incident, but the situation was worrying, the security firm said.

“Watering-hole attacks” have become relatively common in computer hacking crimes targeting specific industries and users.

Florida is often a target.

The site is owned by a water utility in Florida and was compromised in December by hackers with malicious code targeting water utilities.

During the 58 days the site was infected, more than 1,000 computers visited the site.

One visit by an unauthorized person used the site to adjust chemicals that treat drinking water for about 15,000 residents of a small town northwest of Tampa.

The change was immediately recognized and canceled.

According to Dragos, the malicious code collected more than 100 pieces of detailed information about visitors.

Information such as CPU type, operating system, browser, time zone, and geolocation were just a few examples of information that the code could access.

The code also led visitors to two different websites that collected cryptographic hashes that uniquely identified each connecting device and uploaded fingerprints to a database.

Although the safety flaws did not cause extreme damage, as the majority of the attacks were caught immediately, Dragos researcher Kent Backman said this should be a wake-up call for water plants.

For more information, read the original story in arstechnica. 

Top Stories

Related Articles

May 31, 2025 A coordinated supply chain attack has compromised between 500 and 1,000 e-commerce websites by exploiting vulnerabilities in 21 more...

May 31, 2025 A widely used open-source Go library, easyjson, used in healthcare, finance and even defence has come under scrutiny more...

May 31, 2025 (EDITORIAL) A messaging tool used by Trump administration officials to archive encrypted Signal messages has been hacked — more...

April 22, 2025 Anthropic, a leading artificial intelligence company, anticipates that AI-powered virtual employees could begin operating within corporate networks as more...

Jim Love

Jim Is and author and pud cast host with over 40 years in technology.