Evil PLC Attacks: Weaponizing PLCs as Attack Platforms
Sharon Brizinov demonstrates 'Evil PLC' attacks, weaponizing compromised industrial PLCs as offensive footholds to compromise engineering workstations.
Summary
Flipping the Script on Industrial Control System Attacks
While traditional ICS attacks focus on compromising engineering workstations to attack PLCs, Sharon Brizinov explores weaponizing the PLC itself as a predatory platform.
Storing Offensive Payloads in PLC Logic and Memory
Brizinov demonstrates embedding malicious code and weaponized project files directly inside PLC controller memory.
Compromising Engineers During Routine Maintenance
When maintenance engineers connect engineering software (TIA Portal, RSLogix) to perform diagnostic downloads, the weaponized PLC exploits vulnerabilities in the engineering workstation.
Hardening Industrial Maintenance Workflows
The author provides defensive mitigations—including engineering software sandboxing, cryptographic project signing, and controller integrity verification.
Related talks
Main Stage·42 min
Mars Cheng · Selmon Yang
TXOne researchers audit the Mitsubishi Electric factory automation ecosystem, discovering critical vulnerabilities in engineering software, protocols, and PLCs.
nullcon·28 min
Engineers explore architecture and security mechanisms for Goa 2015: ICS SCADA Security Analysis of a Beckhoff CX5020 PLC by Hans Hoefken.
ICS Village·2 min
The ICS Village closing reflections and fast-forward overview on emerging threats and security challenges across industrial control systems.