Claims of a Cyber Attack on Iran’s Abadan Oil Refinery and the Need for Root Cause Analysis
Summary: On October 20, 2019, a Twitter account claimed a fire at Iran's Abadan Oil Refinery was a confirmed cyber attack, while Reuters, citing Iranian state broadcaster IRIB, reported the fire was in a waste canal and under control. Dragos assessed that claims of a cyber attack were immature and unlikely to be founded in proper evidence, noting that refinery personnel would not have had time to perform root cause analysis while still fighting the fire.
What you should know: In the 2017 TRISIS incident, plant engineers could not identify the cyber attack during or after the event and returned to operations, giving the adversary another attempt at safety systems; Dragos estimates only a small subset of the ICS community has visibility into its networks today, and a much smaller subset ties detection and collection to root cause analysis.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026