Malware could drain your fuel tank as well as your bank account
Malware could drain your fuel tank as well as your bank account
Publish Date: 2026-06-05 12:05:00
Source Domain: www.csoonline.com
The attacks take three forms: authentication bypass and hardcoded credentials, which allow attackers to gain access to device management; OS command execution and SQL injection to manipulate underlying databases; and privilege escalation, in which attackers obtain full administrator access.
System administrators working for organizations using ATGs are advised to protect their systems by removing connections to serial ports to eliminate public internet exposure by, changing default passwords immediately, applying the latest patches, reporting any suspicious activity to the CISA, and urging companies in their supply chain to also adopt best practises against such attacks.
CISOs in these companies should already be doing this as they can’t say that they were unaware of the risks: Last year, a Canadian fuel company was attacked and its systems compromised and in 2024, security company BitSight warned that ATGs were a sitting target for cyber criminals.
-security.jpg?sfvrsn=982907ba_5 "A First Step to Unpacking Cyber, Deception, and Intelligence Contests")