Lucrezia Ciotti A new cyber offensive against Italy by the Russian hacker group NoName057. After threats against Antonio Tajani's family, the criminals claimed responsibility for an attack on the control systems of machinery and heating systems . The National Cybersecurity Agency has begun investigations to determine the true extent of the intrusion.
Russian hackers attack Italy, a new offensive by the NoName057 group targeting industrial machinery and heating systems.
Following threats against the family of Foreign Minister Antonio Tajani , the Russian hacker collective NoName057 is targeting Italy again with a new cyber offensive. This time, according to a claim made on the group's Telegram channel, they allegedly compromised control systems for industrial machinery and heating systems.
The incident is reminiscent of what happened in recent days in several European countries, when hackers announced an intrusion into refrigerator management systems.
The National Cybersecurity Agency (Cybersecurity Agency) is currently investigating the incident, having identified the claimant in the early hours of the morning. Initial information gathered, however, appears to downplay the scope of the attack: " From initial investigations ," the agency explained to il Fatto Quotidiano , " it appears likely that a small system, not used in an industrial context, was affected, exposed in an unsafe manner ."
The collective accompanied the message with a new threat: " Today this plant. Tomorrow the next one. Water services, energy, production, the list is open ."
Telegram Claims: "No Malware Was Required"
In the online post, NoName057 claims to have accessed the systems without using malware, by directly intervening on the devices. " The Italian 'specialists' have once again left the industrial system completely open ," the statement reads. The hackers claim to have controlled several parameters, including those related to the thermal oil, the boost pump, and the boiler, modifying the settings and managing the pumps' on/off cycles. " No malware was necessary. We simply logged in and got to work ," they claim.
Among the main preventive measures recommended by the authority are the use of strong and different passwords for each service , combined with centralized management of credentials, and the application of the principle of Least Privilege, which limits access to only those resources necessary to perform specific tasks. It is also essential to keep software, firmware, and security patches updated , as well as using multifactor authentication for all remote access. These precautions were already mentioned in bulletins released following the attacks on supermarket refrigeration systems and the reporting of vulnerabilities in the PHP language.