MalwareBleeping Computer
9.5 — CRITICAL
Hackers breached a small Polish energy plant via private APN last year
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A Russian Electrum threat group-linked attacker breached a small Polish energy plant via private APN, compromising operational technology (OT) systems and causing a short-lived outage. The attack demonstrated a novel attack path using a private APN to move laterally through the network.
⚙️Technical Details
Affected Systems
WAGO PFC200 PLCSiemens PLCsMoxa devices
Attack Vectors
private Access Point Name (APN)Teltonika cellular routerFortiGate VPN/firewall
💥Impact Assessment
Severity: critical
Who Is at Risk
Polish energy sector, specifically small combined heat-and-power plants
🛡️Recommended Actions
1Enable isolation between connected clients on private APNs
2Use allowlists for essential traffic between APN gateways and OT systems
3Disable exposed SSH and Telnet administration services
📦Affected Products
WAGO PFC200 PLCSiemens PLCsMoxa devices
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.