Thousands of fuel gauges exposed on the Internet can be hacked and used maliciously

“The experts we spoke to expressed some concern about the ability for an attacker to change the tank’s settings remotely,” the researchers said. “Alarms are very important so that operators can also understand when the tank is about to fill up and have enough time to stop refilling. Without alarms, the chances of spills will increase significantly, which, depending on the type of fuel, can create a dangerous situation.”

Other attacks may involve reformatting the system, deleting values, or flashing the device with faulty firmware which can lead to ATG system failure. Attackers can gain information about fuel consumption patterns that can help them prepare for another devastating attack or allow them to make a tank disappear completely and steal fuel from it.

“Among the organizations affected by these new risks, we were surprised to find airports, government programs, manufacturing companies and services, to give some examples,” said the researchers. “One thing is clear, regarding ATG programs in general and these new risks in particular: the US is the most affected country.”


Source link