Data Centre Operations: Cooling Systems Are Possible Targets for Operational Disruption
Summary: Dragos reports that data centre cooling systems, managed through building automation and building management systems, are plausible targets for adversaries seeking to disrupt operations, citing a July 2021 leak of Iranian government-associated classified documents showing intent to research building management system technologies. The blog also cites the Dragos-designated Threat Group CHERNOVITE, whose PIPEDREAM malware framework includes a MOUSEHOLE module for manipulating OPC-UA server nodes common in data centre environments.
Key Takeaway: Dragos notes that without backup, server room temperatures can become unacceptably hot after only five minutes, and points to the October 2023 Equinix Singapore cooling incident that caused roughly 2.5 million payment and ATM transactions and up to 810,000 digital banking access attempts to fail.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026