Videos / Defcon / Sharon Brizinov: Evil PLC — Turning Industrial Controllers into Weapons

Sharon Brizinov: Evil PLC — Turning Industrial Controllers into Weapons

Duration: 22min 21sec Type: Presentation (lecture) Playlist: 143 of 146 in Defcon
A DEF CON 30 talk introducing a new attack technique against industrial systems — Evil PLC. Instead of hacking a PLC directly, the researcher shows how the controller itself can be weaponized.

When an engineer attempts to configure or diagnose the device, a compromised PLC can attack and infect the engineer’s workstation.

The talk includes demonstrations against major ICS vendors and an analysis of the underlying vulnerabilities that make such attacks possible.