Kevin BeaumontKonto zweryfikowane

Tip - if you want in to a bunch of factory networks, don't target the companies - target their ICS suppliers. Find names via case studies.

There's a bunch of key ones which are embedded everywhere. They have IPsec VPNs to customer factory networks for support.

They will say they have 2FA etc. Find engineer on LinkedIn. Send a Word doc with macro RAT. Boom - you're behind firewalls.

Because vendors usually self managed black box VPN appliances at sites, the actual company doesn't see logs = doesn't know they are owned.

The vendors engineers are just that, engineers for XYZ piece of factory kit. They aren't Infosec. It's a neat design gap for 'air gap'.