Hackers gain unauthorized access to a modular hybrid controller

A hacker or group of hackers gained unauthorized access to a modular hybrid controller resulting in a denial of service and loss of equipment control. There were two phases to the attack. First, hackers opened connections, sent unknown messages, and left without closing the connection. After repeated attacks, all connections were consumed resulting in a denial of service to legitimate users on the Ethernet port. Second, hackers sent a Web page to the controller containing Java script and the text: “Hello! Welcome to http://worm.com Hacked by Chinese.” This exposed a bug in the TCP/IP stack causing the controller to reset, forcing all outputs to their off state.

Two incidents: first caused a denial of service and loss of equipment control the second caused the controller to reset, forcing all outputs to their off state.  It is unknown what impact this had on the process being controlled by the “modular hybrid controller”.