Which attack targets vulnerabilities in Industrial Control Systems (ICS) and operational technology (OT)?

Question

Options

• APhishing
• BMan-in-the-middle
• CStuxnet
• DSQL Injection

• A
  6% (2)
• B
  3% (1)
• C
  90% (28)

Explanation

Stuxnet is the answer because it was a sophisticated, purpose-built cyberweapon specifically designed to target ICS/OT environments - namely Iranian nuclear centrifuges controlled by Siemens PLCs. It's the defining example of a cyberattack against operational technology infrastructure.

Why the distractors are wrong:

• Phishing (A) is a social engineering technique used to steal credentials or deliver malware - it's not specific to ICS/OT and is more of an initial access method than a targeted ICS attack.
• Man-in-the-middle (B) intercepts communications between two parties and can occur in any network context; it has no special association with industrial control systems.
• SQL Injection (D) exploits database input vulnerabilities in web applications - it targets software data layers, not industrial hardware or OT protocols.

Memory tip: Think "S for SCADA" - Stuxnet = SCADA/ICS. Stuxnet was the first widely known cyberweapon to cross from the digital world into the physical/industrial world, making it synonymous with ICS attacks on every security exam.

No community discussion yet for this question.