Exposing the vulnerable side of cranes and other heavy machinery through hackers

Source: Forbes

Federico Maggi will never forget the first time he saw a crane being hacked.

Last March, he was on a strange kind of road trip. Travelling the Lombardi region of Italy with his colleague Marco Balduzzi in a red Volkswagen Polo, the pair hoped to convince construction site managers, who they’d never met or spoken with before, to let them have a crack at taking control of cranes with their hacking tools.

Surprise, surprise: They weren’t having much luck. But one such manager, who Maggi fondly remembers as Matteo, was game. Armed with laptops powered by the VW’s battery, scripts for running their hacks and some radio hardware to beam out the exploit code, Maggi and Balduzzi got to work.

Matteo was asked to turn off his transmitter, the only one on-site capable of controlling the crane, and put the vehicle into a “stop” state. The hackers ran their script. Seconds later, a harsh beeping announced the crane was about to move. And then it did, shifting from side to side. Looking up at the mechanism below a wide blue sky, Matteo was at first confused.

“I remember him looking up and asking, ‘Who is doing that ?’ Then he realized the test was successful,” Maggi recalls.

Matteo’s crane was just the start. Over the coming days and weeks, the researchers, who ply their trade at Japanese cybersecurity giant Trend Micro, became professional “crane spotters.” Able to detect potentially vulnerable machines on site, they embarked on an unprecedented hacking trip.

They cajoled their way into 14 locations where they were allowed to hack into devices that not only controlled cranes but excavators, scrapers and other large machinery. In every case, their preprepared attack code worked.

Continue reading on Forbes: https://www.forbes.com/sites/thomasbrewster/2019/01/15/exclusive-watch-hackers-take-control-of-giant-construction-cranes/#7ee5f29a1d0a


mentalhealth.jpg
December 19, 2018

Taking Care of #1 This Winter

The end of the year is a joyous time, but for some people it can be difficult. This year, instead of worrying about finding the perfect gift, attending all the parties or pretending everything is perfect, make sure you make time to take care of yourself and put your well-being first.
Read More
CCSPI Photo.jpg
November 16, 2018

Contract Awarded for Coastal Communities Social Procurement Initiative

The City of Victoria, on behalf of the Coastal Communities Social Procurement Initiative Steering Committee, is pleased to announce it has awarded a two-year contract to Scale Collaborative, Vancouver Island Construction Association, Buy Social Canada, and Presentations Plus to incubate a two-year Social Procurement Hub for the Coastal Communities Social Procurement Initiative (CCSPI).
Read More
VICA Halloween 2018.jpg
November 01, 2018

October 31: A Spirited Time for the Construction Industry

Over here at the Construction Association, we take full advantage of every opportunity to play dress up and act out of character, while still getting our jobs done. Some of us are super...and some of us are super twisted. We love seeing our members showing their spirited side as well!
Read More
Bains - Foreign Workers Annoucement.JPG
October 23, 2018

​Legislation better protects temporary foreign workers from exploitation

The legislation is intended to recognize the important role foreign workers have in B.C.’s growing economy. While most employers and recruiters are committed to treating foreign nationals fairly, there are some who require closer scrutiny and enforcement action. In 2017, there were 47,620 work permits issued for foreign workers destined for B.C. The third largest sector is accommodation and food services (8%), followed by construction (6%) and manufacturing (5%).
Read More