This is a pretty funny breach, ngl: https://www.bleepingcomputer.com/news/security/hackers-breached-a-small-polish-energy-plant-via-private-apn-last-year/
Power plant tried to put their operational stuff on a private APN (esseitally a private virtual mobile network), which has been a bit of a trend lately. There's benefits/drawbacks to it like ease of device deployment, resiliency and different security considerations, but I won't get into the details about that here.
The funny part is that despite all the equipment being on a private APN, the attacker just had to compromise a Fortinet shitbox like usual, from there it seems like there was were basically zero barriers preventing them from just bridging onto the mobile network and talking to whatever they wanted.
Power plant tried to put their operational stuff on a private APN (esseitally a private virtual mobile network), which has been a bit of a trend lately. There's benefits/drawbacks to it like ease of device deployment, resiliency and different security considerations, but I won't get into the details about that here.
The funny part is that despite all the equipment being on a private APN, the attacker just had to compromise a Fortinet shitbox like usual, from there it seems like there was were basically zero barriers preventing them from just bridging onto the mobile network and talking to whatever they wanted.
1
