ZionSiphon malware expert

ZionSiphon malware experts like it was created from AI whose waste function didn't work.

In modern times, although there are a lot of malware on the Internet, some malware that is exaggerated will be exposed by a group of experts that they may not have the ability to boast about.

According to a report by the website Industrial Cyber, a research team from Nozomi Networks Labs, a cybersecurity specialist, to ZionSiphon malware, which the hacker team associated with boasted was an OT (Operational Technology) malware or an industrial system attack that was specifically created to attack Israel's water supply plants. The results of the investigation showed a lot of amazing: the internal malware mechanism was filled with incompletely written Execution Path, inconsistent functionality, and patterns. Writing that showed that the author had no real knowledge of the operation of the industrial system led the research team to expect that this malware was only a mock-up rather than a real danger, as hackers boasted.

In addition, the research team said that the hardcoded configuration within the malware is not connected to the real-world reference. Everything is like it was created by the AI or Large Language Model, which is created by the developer to type for the AI itself to create a setting for the attack on the Water Desalination Plant, which is all in line with the Dragos research team, another company that specializes in treatment. Cybersecurity for industrial facilities, which found that the malware had an incomplete Geofencing Function code based on local IP authentication against static IP ranges, which cannot operate within the NAT (Network Address Translation) environment that is commonly used by industrial facilities.

And even more compared to the OT malware that can actually work like Industroyer2, where parameters such as Information Object Addresses, IP Numbers, Ports, and IEC-104 are written to match the target and environment they want to attack the most, as well as to match the physical functions of the target device that will change according to the manufacturer (Vendor) and installation. This requires a high level of expertise and knowledge compared to what can be easily seen, such as setting up to maximize the amount of chlorine (Chroline). Through the Modbus Settings File or Command, in fact, to do so requires a detailed setting from the required chlorine content and the water pressure level of the target plant. The Modbus command has no direct function.

So the research team concluded that such malware is not dangerous and cannot cause harm to factories.

# Trending # Lemon 8 Howtoo # lemon 8 diary # zjonsiphon # freedomhack