Cyberattacks Targeting Fuel Tank Monitoring Systems: What You Need to Know

A recent advisory from the Cybersecurity and Infrastructure Security Agency (CISA), along with the FBI, NSA, and Department of Energy, has brought to light an urgent threat: active cyberattacks targeting internet-exposed automatic tank gauge (ATG) systems. These systems are crucial for monitoring fuel and liquid storage across various critical infrastructure sectors, making them a high-value target for malicious actors. Understanding the nature of these attacks and their potential impact is essential for any organization operating such infrastructure.

Understanding the Attack Vector

The core of this threat lies in the exposure of automatic tank gauge (ATG) systems to the public internet. ATGs are used to remotely monitor inventory levels, detect leaks, and provide other vital data for fuel and liquid storage tanks. When these systems are directly accessible online without proper security controls, they become vulnerable. Attackers can then exploit common weaknesses, such as default credentials, unpatched software vulnerabilities, or misconfigurations, to gain unauthorized access.

Once inside, attackers can manipulate data, disrupt operations, or even cause physical damage by tampering with tank levels or triggering alarms. This highlights a persistent challenge in operational technology (OT) environments: the convergence of IT and OT systems often introduces new attack surfaces that require specialized security considerations.

"The exposure of critical operational technology to the internet without adequate protection remains a significant and recurring cybersecurity risk across all sectors."

Business Impact of ATG System Compromise

The compromise of fuel tank monitoring systems can have far-reaching consequences that extend beyond immediate operational disruption. The business impact can be severe and multifaceted:

• Operational Disruption: Attackers can halt fuel deliveries, manipulate inventory records, or trigger false alarms, leading to supply chain interruptions and significant operational downtime.
• Financial Loss: Direct financial losses can stem from stolen fuel, damage to equipment, remediation costs, and regulatory fines. Disruption of services can also lead to lost revenue and customer dissatisfaction.
• Environmental Damage: Depending on the type of liquid stored, tampering with tank systems could lead to spills or environmental contamination, incurring massive cleanup costs and public relations crises.
• Safety and Security Risks: In critical infrastructure, the integrity of these systems directly impacts public safety. Sabotage could lead to hazardous situations or even broader public safety concerns.
• Reputational Damage: A cybersecurity incident involving critical infrastructure can severely damage an organization's reputation, eroding public trust and leading to long-term business challenges.

Lessons Learned from Critical Infrastructure Attacks

The CISA warning underscores several critical lessons for organizations managing OT and critical infrastructure components. These aren't new lessons, but they gain renewed urgency with each new attack vector.

Prioritize Asset Visibility and Inventory

You cannot protect what you don't know you have. Many organizations lack a complete and accurate inventory of their OT assets, including which ones are internet-facing. This visibility gap is a primary entry point for attackers.

Implement Robust Network Segmentation

OT networks should be physically or logically separated from IT networks. Minimizing direct internet exposure for critical systems like ATGs is paramount. When remote access is necessary, it must be secured with multi-factor authentication (MFA) and strong access controls.

Patch Management and Vulnerability Assessments

Regularly scheduled vulnerability assessments and prompt patching of known vulnerabilities are non-negotiable. Many attacks exploit well-known weaknesses that could have been mitigated with proper maintenance. Organizations should also consider regular penetration testing to simulate real-world attacks and identify exploitable weaknesses before criminals do.

Develop and Test Incident Response Plans

Even with the best preventative measures, a breach is always a possibility. A well-defined and regularly tested incident response plan is crucial for minimizing damage and ensuring a swift recovery. This plan should specifically address the unique challenges of OT environments.

Actionable Takeaways for Mitigating Risk

Here are 3-5 concrete steps organizations can take to bolster their defenses against threats targeting critical infrastructure components like fuel tank monitoring systems:

1. Identify and Isolate Exposed OT Assets: Conduct a thorough audit to identify all internet-facing OT assets, especially ATGs. Implement strict network segmentation to remove direct internet exposure. For necessary remote access, use secure VPNs with MFA.
2. Strengthen Access Controls: Replace all default credentials immediately. Implement a strong password policy and enforce multifactor authentication for all remote access and administrative interfaces. Consider Privileged Access Management solutions.
3. Regularly Scan for Vulnerabilities: Implement a continuous vulnerability management program. This includes frequent scanning of both IT and OT networks for known weaknesses and prompt application of security patches. Lyra can assist with these vulnerability assessments.
4. Enhance Monitoring and Detection: Deploy robust monitoring solutions that can detect anomalous "machine-to-machine" behavior or changes in configurations within your OT environment. This includes solutions like Managed Detection and Response (MDR) that provide 24/7 oversight.
5. Educate Your Workforce: Ensure that personnel interacting with OT systems are trained on cybersecurity best practices, including identifying phishing attempts and understanding secure remote access procedures.

How Lyra Helps

Lyra understands the complexity and criticality of safeguarding operational technology environments. Our flagship Incident Response & Recovery service is designed to help organizations prepare for, respond to, and recover from sophisticated cyberattacks, including those targeting vital infrastructure like automatic tank gauge systems. We provide expert guidance on hardening your defenses, developing robust incident response plans, and rapidly restoring operations in the event of a breach.

Our approach focuses on proactive measures, such as cybersecurity strategy and consulting to build resilient architectures, alongside rapid response capabilities to minimize the impact of an incident. By partnering with Lyra, you gain a trusted ally committed to securing your critical assets and ensuring business continuity.

Protecting your operational technology and critical infrastructure is not merely an IT concern—it is a business imperative. Don't wait for an incident to occur. Learn how Lyra can help you assess your current posture, strengthen your defenses, and develop an actionable incident response plan. Contact us today to secure your vital systems. Contact Lyra