Cyber Av3ngers Hacktivist Group Targeting Israel-Made OT Devices
Summary: Dragos Threat Intelligence tracked the Cyber Av3ngers hacktivist group, first observed in early September 2023 claiming a disruption of Israel Railway's network that Dragos assessed as false, followed by October 2023 claims against an Israeli power grid and the city of Yavne that Dragos also assessed as false or grossly exaggerated. Around November 25, 2023, a U.S. municipal water authority disclosed the group had accessed one of its Unitronics programmable logic controllers and altered the device's menu page with anti-Israel commentary, with Dragos suspecting internet scanning and default credentials from online Unitronics manuals as the likely vector.
Key Takeaway: A hacktivist group whose earlier claims Dragos debunked as false still got into a live U.S. water utility's PLC using credentials printed in the manufacturer's public manual, and Dragos notes Unitronics devices are deployed across multiple global industry sectors.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026