Trend Micro uses factory honeypot to trap hackers


Bengaluru, Jan 23 (IANS): Global Cloud security company Trend Micro on Thursday announced results of a six-month honeypot investigation which revealed that unsecured industrial environments are primarily victims of common cyber threats.

The honeypot was compromised for cryptocurrency mining, targeted by two separate ransomware attacks and used for consumer fraud.

"Too often, discussion of cyber threats to industrial control systems (ICS) has been confined to highly sophisticated, nation-state level attacks designed to sabotage key processes. While these do present a risk to Industry 4.0, our research proves that more commonplace threats are more likely," Greg Young, vice president of cybersecurity for Trend Micro, said in a statement.

"Owners of smaller factories and industrial plants should therefore not assume that criminals will leave them alone. A lack of basic protections can open the door to a relatively straightforward ransomware or cryptojacking attack that could have serious consequences for the bottom line," Young added.

To better understand the attacks targeting ICS environments, Trend Micro Research created a highly realistic, industrial prototyping company.

The honeypot consisted of real ICS hardware and a mix of physical hosts and virtual machines to run the factory, which included several programmable logic controllers (PLCs), human machine interfaces (HMIs), separate robotic and engineering workstations and a file server.

Trend Micro urged smart factory owners to minimize the number of ports they leave open and to tighten access control policies, among other cybersecurity best practices.

According to the company, implementing cybersecurity solutions designed for factories, like those offered by Trend Micro, can help further mitigate the risk of attack.

  

Top Stories


Leave a Comment

Title: Trend Micro uses factory honeypot to trap hackers



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.