Cybersecurity for Oil and Gas Industries: How Hackers Can Manipulate Oil Stocks
summary
Claim: enterprise ERP breaches lead into OT and let attackers falsify inventory and trigger physical damage. The presenters demonstrate an attack chain from Internet ERP compromise through MII to PCo and OPC into PLCs, exploit a SAP HANA RCE, abuse MII/PCo SOAP admin and base64-stored credentials to achieve OS execute and upload a backdoor, and run a live PCO OPC spoofing demo that keeps a dashboard showing full tanks while valves empty. They cite 3,500 SAP vulnerabilities and SAP control of ~75% of daily oil production.
AI-written summary · about
chapters (5)
- 0:00Start
- 13:50The Burner Management System
- 17:59Fiscal Metering
- 23:13Enterprise Business Applications
- 49:30Interacting with Opc Servers
related talks
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
40mDefending Operational Frontlines with Industry Experts with...
46mAn OT Cyber attack simulation on a chemical plant
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
07mERP Security: Vulnerabilities, Threats and Trends. Expert Opinion
32mHacking the OSS Supply Chain
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
49mWhat Hacking the Planet Taught Us About Defending Supply Chain Attacks