Osegi
Security·1 min read

Siemens Simatic IoT2050 gateways targeted by botnet attacks

Attackers are going after Siemens Simatic IoT2050 gateways and trying to plant botnet malware on them, according to information that emerged on Monday.

Siemens Simatic IoT2050 industrial gateway mounted in a control cabinet with network cables attached.
Image: Security
SUMODialoediviewer

Attackers are actively targeting Siemens IoT gateways of the Simatic IoT2050 series. According to information that became public on Monday, their goal is to install botnet malware on the devices.

What is known

The attacks focus on the Simatic IoT2050, a gateway used to connect industrial equipment to networks and IT systems. Once infected, such devices can be remotely controlled and misused as part of a botnet, for example to carry out further attacks.

Details beyond this, including the exact attack path, the number of affected devices and the malware family involved, were not available at the time of writing.

Why it matters

Gateways sit at the boundary between operational technology and corporate networks. A compromised unit can therefore become a foothold for attackers and a risk for the systems behind it, in addition to the loss of the device itself.

Operators of Simatic IoT2050 devices should check whether their gateways are reachable from the internet and follow current guidance from Siemens. Further information from the manufacturer is expected to clarify which configurations are affected.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:siemenssimatic iot2050botnetiot securityindustrial security

More from this day

See all →

More in: Security

See all →