{"id":4995,"date":"2026-08-05T21:47:59","date_gmt":"2026-08-05T21:47:59","guid":{"rendered":"https:\/\/crosscountrymovingteams.com\/?p=4995"},"modified":"2026-08-05T21:47:59","modified_gmt":"2026-08-05T21:47:59","slug":"iranian-hackers-and-americas-achilles-heel-on-water-default-passwords","status":"publish","type":"post","link":"https:\/\/crosscountrymovingteams.com\/?p=4995","title":{"rendered":"Iranian hackers and America\u2019s Achilles heel on water: default passwords"},"content":{"rendered":"
\n

The attackers did not try to infiltrate the computers that utility offices use. Instead, they tried to seize control of small computers in equipment like pumps and valves that deliver drinking water to millions of people.<\/p>

Read more After months of a public back and forth over Mamdani\u2019s pied-a-terre tax, Ken Griffin isn\u2019t ready to give up on New York after all<\/a><\/p>\n

The utilities countered the attacks by shutting down the control computers and sending personnel out into the field to operate equipment manually. Utility officials have said that water remained safe to drink.<\/p>

<\/div><\/div><\/div>\n

As a scholar who researches cyber conflict, I find that the methods used in these incidents are typical of international cyberattacks. Initial suspicion has fallen on hackers allegedly aligned with Iran, but the U.S. government has yet to attribute the attack to anyone.<\/p>\n

How can someone from far away seize control of a water system and possibly shut off the flow or taint the water?<\/p>\n

Controlling the water machinery<\/h2>\n

There are about 152,000 public drinking water systems in the United States, according to the federal government. A municipality gets its water from lakes, reservoirs, rivers or underground aquifers.<\/p>\n

Pumps move water through pipes to a treatment plant that filters and disinfects it. More pumps push the treated water into storage tanks, then through distribution pipes to homes and businesses. The entire system can span many square miles.<\/p>

<\/div><\/div>\n\n
\"a<\/figure>\n
Small computers control numerous pumps and other equipment involved in moving and treating drinking water, from source to consumer. Taloma et al, CC BY<\/figcaption>\n

The hackers accessed small computers called programmable logic controllers at the water systems that operate all sorts of industrial equipment. The programmable logic controllers read sensors that measure conditions such as water pressure, water chemistry, tank levels and equipment status, and automatically operate pumps, valves and alarms. A household thermostat is a useful comparison: It reads the temperature and tells the heating or cooling system what to do.<\/p>\n

The programmable logic controllers also transmit operational data to a utility\u2019s central computer system. Workers use dashboards to monitor the information and send commands back to the controllers. The two-way communications can travel through wired networks, over radio or cellular links, or through internet connections.<\/p>\n

Many utilities operate with small staffs, so remote connections allow an employee to monitor a distant pump or tank, receive an alarm after hours or let a vendor diagnose equipment without traveling to every site.<\/p>\n

Controllers that use the internet may access it directly, or go through protective firewalls, secure gateways or virtual private networks. Direct access is more vulnerable because there are fewer defensive barriers. A hacker can find a controller by scanning the internet and finding its Internet Protocol, or IP, address, then try a weak or stolen password or exploit a known security flaw.<\/p>\n

To reach a controller through a secure gateway or encrypted service, a hacker would have to steal remote-access credentials, or break into the gateway or private network, or get control of an operator\u2019s workstation. The hacker could then use that foothold to reach the controller.<\/p>\n

Attempted access can also be part of an intruder\u2019s longer-term strategy to collect information, test defenses or establish entry for a later date. https:\/\/www.youtube.com\/embed\/tqi0eRN_244?wmode=transparent&start=0 A cybersecurity consultant explains how hackers gain access to the small computers that control industrial and utility equipment like those used in drinking water systems.<\/p>\n

How an attack works<\/h2>\n

Attacks on industrial control systems often follow a familiar sequence. Infiltration often begins with a quiet search for access. Attackers scan internet addresses for controllers, dashboards and outside companies that provide remote access services, looking for targets that are linked directly to the internet.<\/p>

Read more The Trump administration has doled out $100 billion in tariff refunds, but Americans are suing U.S. companies for not seeing a penny of the returns<\/a><\/p>\n

Next, the attacker looks for a default or stolen password to log in, an unpatched vulnerability or a misconfigured remote-access service. Sophisticated malware is not always necessary: In 2023, U.S. officials reported that Iranian-linked hackers targeted internet-connected Unitronics programmable logic controllers used by water utilities. Some utilities were still using the manufacturer\u2019s default password, according to the Cybersecurity and Infrastructure Security Agency.<\/p>\n

Finally, the attacker exploits the access they have gained. This could mean changing a password, issuing commands or attempting to alter the controller\u2019s software. Researchers at the National Institute of Standards and Technology note that an intruder could replace legitimate control instructions with malicious commands. An attacker could also sneak into an office computer through phishing, then access the controller network.<\/p>\n

Industrial equipment in service for decades is extremely vulnerable because it may not support modern security features, and utilities may delay updates because they want to avoid interrupting operations.<\/p>\n

Reports thus far indicate that hackers accessed the Minnesota water systems through controllers that communicate over the internet directly. A July 30 FBI and Environmental Protection Agency advisory stated that Rockwell Automation MicroLogix programmable logic controllers that were connected directly to the internet, and changed their IP addresses and passwords.<\/p>\n

Defensive moves that utilities can take<\/h2>\n

The most immediate step that utilities can take to protect themselves is to remove controllers and human dashboards from direct connection to the internet. Following the Minnesota attacks, the Cybersecurity and Infrastructure Security Agency urged water utilities to place this equipment behind properly configured firewalls and other safeguards.<\/p>\n

When remote access is necessary, utilities should route communications through a secure gateway or VPN, require multiple levels of authentication, and limit how much access each user has. Utilities should change default passwords, disable unused remote-access services and install vendor-approved updates to connected equipment.<\/p>\n

In their , the cybersecurity agency also recommends separating operational networks from email and other business systems. This measure makes it harder for attackers to move between the two systems.<\/p>\n

Finally, utilities should back up controller programs, log remote-access activity and practice restoring systems and operating manually.<\/p>\n

A matter of resources<\/h2>\n

Rural water utilities with limited resources are a significant vulnerability in the United States\u2019 critical infrastructure.<\/p>\n

A group of volunteer cybersecurity experts is providing guidance to water utilities, but their reach is limited. Smaller utilities may need government funding or shared cybersecurity services to be able to defend themselves.<\/p>\n

William Akoto, Assistant Professor of Global Security, American University School of International Service<\/em><\/p>\n

This article is republished from The Conversation under a Creative Commons license. Read the original article.<\/em><\/p>

Read more In its first deal since going public, Italian unicorn Bending Spoons buys Airtable at a $9 billion discount<\/a><\/p>\n\n

\"The<\/figure>\n\n<\/figurlazyload><\/div>","protected":false},"excerpt":{"rendered":"

The attackers did not try to infiltrate the computers that utility offices use. Instead, they tried to seize<\/p>\n","protected":false},"author":1,"featured_media":43,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4995","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-interesting"],"yoast_head":"\nIranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/crosscountrymovingteams.com\/?p=4995\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Iranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team\" \/>\n<meta property=\"og:description\" content=\"The attackers did not try to infiltrate the computers that utility offices use. Instead, they tried to seize\" \/>\n<meta property=\"og:url\" content=\"https:\/\/crosscountrymovingteams.com\/?p=4995\" \/>\n<meta property=\"og:site_name\" content=\"Cross Country Moving Team\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-05T21:47:59+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/#\\\/schema\\\/person\\\/1b8121bfb9a1c55d1fff3fca675fceaa\"},\"headline\":\"Iranian hackers and America\u2019s Achilles heel on water: default passwords\",\"datePublished\":\"2026-08-05T21:47:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995\"},\"wordCount\":1108,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/175605f33de86f2443ba4177dfff3799.webp\",\"articleSection\":[\"Interesting\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995\",\"url\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995\",\"name\":\"Iranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/175605f33de86f2443ba4177dfff3799.webp\",\"datePublished\":\"2026-08-05T21:47:59+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/#\\\/schema\\\/person\\\/1b8121bfb9a1c55d1fff3fca675fceaa\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#primaryimage\",\"url\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/175605f33de86f2443ba4177dfff3799.webp\",\"contentUrl\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/175605f33de86f2443ba4177dfff3799.webp\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?p=4995#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Iranian hackers and America\u2019s Achilles heel on water: default passwords\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/#website\",\"url\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/\",\"name\":\"Cross Country Moving Team\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/#\\\/schema\\\/person\\\/1b8121bfb9a1c55d1fff3fca675fceaa\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\\\/\\\/crosscountrymovingteams.com\"],\"url\":\"https:\\\/\\\/crosscountrymovingteams.com\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Iranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/crosscountrymovingteams.com\/?p=4995","og_locale":"en_US","og_type":"article","og_title":"Iranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team","og_description":"The attackers did not try to infiltrate the computers that utility offices use. Instead, they tried to seize","og_url":"https:\/\/crosscountrymovingteams.com\/?p=4995","og_site_name":"Cross Country Moving Team","article_published_time":"2026-08-05T21:47:59+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#article","isPartOf":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995"},"author":{"name":"admin","@id":"https:\/\/crosscountrymovingteams.com\/#\/schema\/person\/1b8121bfb9a1c55d1fff3fca675fceaa"},"headline":"Iranian hackers and America\u2019s Achilles heel on water: default passwords","datePublished":"2026-08-05T21:47:59+00:00","mainEntityOfPage":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995"},"wordCount":1108,"commentCount":0,"image":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#primaryimage"},"thumbnailUrl":"https:\/\/crosscountrymovingteams.com\/wp-content\/uploads\/2026\/05\/175605f33de86f2443ba4177dfff3799.webp","articleSection":["Interesting"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/crosscountrymovingteams.com\/?p=4995#respond"]}]},{"@type":"WebPage","@id":"https:\/\/crosscountrymovingteams.com\/?p=4995","url":"https:\/\/crosscountrymovingteams.com\/?p=4995","name":"Iranian hackers and America\u2019s Achilles heel on water: default passwords - Cross Country Moving Team","isPartOf":{"@id":"https:\/\/crosscountrymovingteams.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#primaryimage"},"image":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#primaryimage"},"thumbnailUrl":"https:\/\/crosscountrymovingteams.com\/wp-content\/uploads\/2026\/05\/175605f33de86f2443ba4177dfff3799.webp","datePublished":"2026-08-05T21:47:59+00:00","author":{"@id":"https:\/\/crosscountrymovingteams.com\/#\/schema\/person\/1b8121bfb9a1c55d1fff3fca675fceaa"},"breadcrumb":{"@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/crosscountrymovingteams.com\/?p=4995"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#primaryimage","url":"https:\/\/crosscountrymovingteams.com\/wp-content\/uploads\/2026\/05\/175605f33de86f2443ba4177dfff3799.webp","contentUrl":"https:\/\/crosscountrymovingteams.com\/wp-content\/uploads\/2026\/05\/175605f33de86f2443ba4177dfff3799.webp","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/crosscountrymovingteams.com\/?p=4995#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/crosscountrymovingteams.com\/"},{"@type":"ListItem","position":2,"name":"Iranian hackers and America\u2019s Achilles heel on water: default passwords"}]},{"@type":"WebSite","@id":"https:\/\/crosscountrymovingteams.com\/#website","url":"https:\/\/crosscountrymovingteams.com\/","name":"Cross Country Moving Team","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/crosscountrymovingteams.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/crosscountrymovingteams.com\/#\/schema\/person\/1b8121bfb9a1c55d1fff3fca675fceaa","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/crosscountrymovingteams.com"],"url":"https:\/\/crosscountrymovingteams.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/posts\/4995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4995"}],"version-history":[{"count":0,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/posts\/4995\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=\/wp\/v2\/media\/43"}],"wp:attachment":[{"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crosscountrymovingteams.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}