CISA and Partners Urge Hardening Automatic Tank Gauge Systems

Key Points:

• Malicious cyber activity targeting U.S.-based Automatic Tank Gauge (ATG) systems has been observed, with threat actors compromising these systems through various attack vectors.
• Affected sectors include Energy, Chemical, Food and Agriculture, and Transportation, with potential impacts such as operational disruptions, environmental hazards, and compromised system integrity.
• Recommended actions include eliminating public internet exposure of ATG systems, enforcing strong credential security, applying patches, and actively monitoring for unauthorized access.

Technical Details: Threat actors exploit vulnerabilities in ATG systems through authentication bypass, OS command execution, and privilege escalation. These actions can lead to unauthorized modifications of critical system functions.

MITRE ATT&CK Techniques:

• T1078 - Valid Accounts (Defense Evasion)
• T1203 - Exploit Public-Facing Application (Initial Access)
• T1068 - Execution with Unprivileged Actor (Execution)

IOCs Mentioned: None mentioned