AM-12-65 Protecting Control Systems from Advanced Threats

Description:

The adversaries who are today's advanced threats routinely penetrate firewalls of all types with tactics which include "spear phishing", credential scraping, tunnelling through legitimate VPNs and piggybacking on legitimate communications. Recent advanced attacks, such as Night Dragon and Shady RAT appear to have been very successful, and there have been no reports of adverse consequences for the authors of those attacks. Given this record of success, security experts expect advanced threats to continue to target businesses and control systems.