American intelligence officials suspect Iranian hackers have infiltrated digital systems monitoring fuel storage tanks across multiple states. Intruders accessed automatic tank gauge (ATG) networks left completely unprotected by passwords.
The breach highlights longstanding vulnerabilities in utility network security, particularly the absence of basic authentication measures on publicly accessible systems. Experts warn that unsecured access of this kind could be exploited to conceal active fuel leaks, posing a significant safety risk.
Iran is the primary suspect in the breach,according to CNN, largely due to the country's documented history of targeting similar fuel infrastructure. Although the attackers altered display readings on the monitors, authorities confirmed no physical damage was caused.
Investigators caution that pinpointing exact culprits remains difficult due to limited digital forensic evidence. The breach occurs against the tense backdrop of the United States and Israeli military conflict with Iran.
The incident presents a political challenge for the Trump administration, as the conflict drives up domestic gas prices. A recent CNN poll indicates 75 per cent of American adults believe the war negatively impacted their finances.
Researchers have flagged internet-facing ATGs as risks for over a decade. Despite warnings, critical infrastructure operators continue to struggle to secure hardware against foreign adversaries.
The conflict has catalysed a tactical shift for Tehran. Israel's National Cyber Directorate head Yossi Karadi stated the warfare shows 'a significant increase in the scale, speed, and integration between cyber operations and psychological campaigns.'
While the Israel Defense Forces reportedly struck an Iranian cyber headquarters in March, Karadi noted that 'from a defensive perspective, in recent months, we are seeing some degradation in parts of the hostile cyber activity.'
Karadi added, 'The bottom line is that Iranian actors are under pressure and are trying to strike wherever they find an opening in cyberspace.' Allison Wikoff, director of global threat intelligence at PricewaterhouseCoopers, stated operations 'are now accelerating with faster iteration, more layeredhacktivist personas, and likely AI-driven scaling for reconnaissance and phishing.'
Wikoff explained, 'What's notably new in their cyber playbook is the swift creation of 'good-enough' malware, including the destructive wiping types, complemented by assertive hack-and-leak campaigns against media, dissidents, and key (US) civilian infrastructure.' These hacking operations manipulate public perception.
Source: International Business Times UK