Hackers used a private APN and a compromised FortiGate/VPN path to move laterally into a second CHP plant in Poland, where they shut down a steam turbine and process-water treatment system. CERT Polska says this was the first known real-world cyberattack to enter an OT network through a private APN, and it recommends treating such networks as untrusted and enforcing client isolation and strict access controls. #CERTPolska #FortiGate #WAGO #Teltonika #Siemens #Moxa #Electrum
Keypoints
- Attackers used a private APN to reach a second Polish CHP plant.
- The plant’s steam turbine and water treatment system were shut down.
- CERT Polska found the attacker moved from a FortiGate VPN into OT networks.
- A WAGO PFC200 PLC with default credentials helped enable further access.
- Polish CERT says this was the first known OT intrusion via a private APN.