Hi there! Censys recently published a blog about the prevalence of ransomware attacks on manufacturing firms, based on new research from GRF. Within the blog, our team included some manufacturing use case queries you can run in Censys Search and Censys ASM to identify and monitor relevant protocols, like those for building automation, PLC communication, HMI/SCADA, and more.
Examples:
Building Automation Protocols
BACnet
- Search Query: services.service_name:BACNET
- ASM Query: host.services.service_name:BACNET
HMI/SCADA
Red Lion Crimson
- Search Query: services.service_name:REDLION_CRIMSON or services.software:(vendor=”Red Lion” and product=”Crimson”)
- ASM Query: host.services.service_name:REDLION_CRIMSON or host.services.software:(vendor=”Red Lion” and product=”Crimson”)
You can check out the full article here: https://censys.com/top-targets-the-impact-of-ransomware-on-manufacturing/