Cyberattack on German Steel Plant
Caused Significant Damage: Report

An attack launched by an advanced persistent threat (APT) group against an unnamed steel plant in Germany resulted in significant damage, according a new report.



Cyberattacks on critical infrastructure are a reality and they’re becoming more frequent. An IT security report for 2014 published by Germany’s Federal Office for Information Security (BSI) on Wednesday describes a noteworthy incident that caused physical damage to a facility.

According to the agency, sophisticated attackers used spear-phishing and social engineering to gain access to the office network of a steel plant. From this network, they made their way into the organization’s production network.

Control components and entire production machines suffered outages due to the attackers’ actions. The outages prevented the plant from appropriately shutting down a blast furnace, leaving it in an undetermined state. This resulted in significant damage to the plant, BSI noted in its report.