Exclusive: Hackers breach tank readers at US gas stations, raising concerns over Iran's involvement and the vulnerability of critical infrastructure.
The recent cyber intrusions into automatic tank gauge (ATG) systems at US gas stations have sparked alarm among officials and experts alike. These breaches, attributed to Iranian hackers, highlight a disturbing trend in the country's cyber capabilities and their potential impact on critical infrastructure.
What makes this incident particularly concerning is the ease with which the hackers gained access to the systems. The ATGs, designed to monitor fuel levels in storage tanks, were left online and unprotected by passwords, allowing the hackers to manipulate display readings without affecting the actual fuel levels. While no physical damage or harm has been reported, the breaches raise safety concerns, as hackers could potentially cause undetected gas leaks.
The US government's inability to definitively determine the culprits due to a lack of forensic evidence is another alarming aspect. Iran's history of targeting gas tank systems and its recent cyber activities during the war with the US and Israel further fuel suspicions. Iranian hackers have already caused disruptions at multiple US oil and gas sites, shipping delays, and the leak of private emails of FBI Director Kash Patel.
The war has also seen Iran's cyber operations escalate in scale, speed, and integration with psychological campaigns. Israeli officials claim to have struck a compound housing Iran's Cyber Warfare headquarters, but the extent of Iranian cyber operatives' involvement remains unclear.
The situation is further complicated by the US government's apparent lack of preparedness for foreign threats to elections. The absence of a specialized team dedicated to detecting and thwarting such threats is deemed strategic malpractice, especially given Iran's history of influence operations during the 2020 election.
The aggressive and unpredictable nature of Iranian cyber operations, coupled with the US government's response, raises questions about the country's cybersecurity posture and its ability to protect critical infrastructure. As the war continues, the US must address these vulnerabilities to ensure the safety and security of its citizens and critical systems.