Lucian Constantin
CSO Senior Writer

Anonymous publishes Israeli SCADA log-in details

news
Jan 12, 20122 mins

Anonymous is currently engaged in an effort to hack Israeli websites as part of a campaign called Operation Free Palestine

A member of the Anonymous hacktivist collective has published a list of Internet-facing Israeli SCADA (supervisory control and data acquisition) systems and alleged log-in details.

The user, who uses the Twitter handle of FuryOfAnon, posted the information on Pastebin with the message: “Who wanna have some fun with israeli scada systems?”

[ Master your security with InfoWorld’s interactive Security iGuide. | Stay up to date on the latest security developments with InfoWorld’s Security Central newsletter. ]

The pastebin post contains a list of IP-based URLs that allegedly correspond to Web administration interfaces of systems that are used to monitor automated equipment in industrial facilities.

Most of the URLs in the original post are no longer accessible. However, the hacker has since released a second list which contains newly found Israeli SCADA systems.

“Find their systems. Login using default logins (‘100’ being the password)” FuryOfAnon said. In December 2011, Google security engineer Billy Rios, disclosed that the default Web log-in credentials for the Siemens SIMATIC SCADA software are Administrator:100.

The same default log-in credentials might have been used by a hacker named pr0f to access a South Houston water utility’s SCADA back in November 2011. The hacker claimed at the time that the system was protected by a three-character password.

FuryOfAnon’s original Pastebin post also contains a list of email addresses and passwords belonging to people from the Israeli Ministry of Defense, Ministry of Foreign Affairs, Ministry of Health, and the Israel Defense Forces. It’s not clear if those also serve as log-in details for the listed SCADA systems.

FuryOfAnon appears to have the support of long-time Anonymous member and former LulzSec leader Sabu, who endorsed his actions via Twitter. Anonymous is currently engaged in an effort to hack Israeli websites as part of a campaign called Operation Free Palestine.

Last week a Saudi hacker published the personal information and active credit card numbers of thousands of Israeli citizen, prompting Israel’s Deputy Foreign Minister Danny Ayalon to compare hacking to terrorism. “No agency or hacker will be immune from a response,” Ayalon said.

Lucian Constantin

Lucian Constantin writes about information security, privacy, and data protection for CSO. Before joining CSO in 2019, Lucian was a freelance writer for VICE Motherboard, Security Boulevard, Forbes, and The New Stack. Earlier in his career, he was an information security correspondent for the IDG News Service and Information security news editor for Softpedia.

Before he became a journalist, Lucian worked as a system and network administrator. He enjoys attending security conferences and delving into interesting research papers. He lives and works in Romania.

You can reach him at lucian_constantin@foundryco.com or @lconstantin on X. For encrypted email, his PGP key's fingerprint is: 7A66 4901 5CDA 844E 8C6D 04D5 2BB4 6332 FC52 6D42

More from this author