Brute-Force Operations Targeting VPNs Across Critical Industrial Sectors

Brute force hitting IT as the entry point, but OT could be the endgame.

Dragos identified brute-force operations targeting VPN appliances in multiple critical North American infrastructure networks, primarily those belonging to electric, oil and gas, water and wastewater, and manufacturing sector organizations.  

The observed reconnaissance activity could lead to unauthorized access to ICS/OT assets and systems, resulting in several impacts, including theft of operational information, loss of control, or manipulation of control.  

This report highlights the growing convergence of IT and OT security risks, particularly in critical infrastructure sectors. IT systems serve as critical access points, enabling adversaries to potentially compromise OT networks that manage essential infrastructure.