{"id":584221,"date":"2023-07-24T17:54:24","date_gmt":"2023-07-24T14:54:24","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/critical-infrastructure-radio-tech-easily-hacked-through-deliberate-backdoor\/"},"modified":"2023-07-24T17:54:24","modified_gmt":"2023-07-24T14:54:24","slug":"critical-infrastructure-radio-tech-easily-hacked-through-deliberate-backdoor","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/critical-infrastructure-radio-tech-easily-hacked-through-deliberate-backdoor\/","title":{"rendered":"#Critical infrastructure radio tech \u2018easily hacked\u2019 through deliberate backdoor"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/img-cdn.tnwcdn.com\/image?fit=796%2C417&amp;url=https%3A%2F%2Fcdn0.tnwcdn.com%2Fwp-content%2Fblogs.dir%2F1%2Ffiles%2F2023%2F07%2Fradio-critical-infrastructure-hack.jpg&amp;signature=1088af64a1e2f6caef19282ef8943799\" \/><\/p>\n<div id=\"article-main-content\">\n                            <span style=\"font-weight: 400;\">Dutch researchers have found vulnerabilities in TETRA \u2014 a radio <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" data-internallinksmanager029f6b8e52c=\"4\" title=\"Technology\" target=\"_blank\" rel=\"noopener\">technology<\/a> used across the world to control critical infrastructure such as power grids, gas pipelines, and trains.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The researchers, <\/span><span style=\"font-weight: 400;\">Job Wetzels, Carlo Meijer, and Wouter Bokslag of cybersecurity firm Midnight Blue, found a deliberate backdoor in the encryption algorithm of these radios \u2014 made by Motorola, Damm, Hytera, and others \u2014 that was \u201ceasy\u201d to hack.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u201cThe results of this research are serious,\u201d said <\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.rtlnieuws.nl\/nieuws\/nederland\/artikel\/5397898\/tetra-lek-kritieke-infrastructuur-c2000-nederlanderse-onderzoekers\"><span style=\"font-weight: 400;\">Jacobs<\/span><\/a><span style=\"font-weight: 400;\">, who is also a professor of computer security at Radboud University Nijmegen. \u201cIt is serious for the government, but also for business. It concerns vital infrastructure whose functioning can be affected by serious attacks.\u201d<\/span><\/p>\n<p><span style=\"font-weight: 400;\">According to researchers, attackers could hack the network to send malicious commands that would disrupt critical infrastructure. They could also listen in on emergency services. \u201cThese are all realistic scenarios,\u201d said Wetzels.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Worryingly, critical infrastructure from all over the world is controlled using TETRA.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In the Netherlands, the port of Rotterdam, several public transport companies, and most airports use the system. C2000, the communication system of the police, fire brigade, ambulance services, and parts of the Ministry of Defence, is also based on TETRA.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Many critical infrastructure authorities in Germany, France, Spain, and other European countries rely on the network, and so do several equivalent entities in the USA, according to a <\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.wired.com\/story\/tetra-radio-encryption-backdoor\/\"><span style=\"font-weight: 400;\">WIRED<\/span><\/a><span style=\"font-weight: 400;\"> investigation. TETRA is estimated to be in use in 120 countries.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">And you don\u2019t even have to be an expert hacker to tap the network. According to Midnight Blue, you could crack the system in a minute using simple hardware such as a radio and dongle. Once cracked, hackers could send malicious commands to critical infrastructure undetected.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The researchers first uncovered the vulnerabilities in 2021 and im<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>tely reported them to the Dutch National Cyber Security Centre. Over the last two years, the NCSC has been hard at work informing the governments of various countries about the dangerous loopholes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Midnight Blue team also took it upon themselves to notify as many manufacturers and users of the technology as possible. Assumably, the researchers and the authorities only now deemed it safe enough to make the information public.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Going forward, Midnight Blue warns that anyone using radio technologies should check with their manufacturer to determine if their devices are using TETRA and what fixes or mitigations are available.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Aside from their day jobs, Wetzels, Meijer, and Bokslag are so-called ethical hackers. Meijer previously cracked the technology behind the OV-chipcard, the Dutch transport card, and Bokslag hacked the wireless car keys of Peugeot, Opel, and Fiat. Both did so to make the technology more secure.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Despite their best efforts to raise awareness of the TETRA backdoor vulnerabilities, the researchers say that many critical infrastructure companies are nonresponsive, and for all we know, could still be at risk.\u00a0<\/span>\n                        <\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/critical-infrastructure-radio-hacked-backdoor-tetra\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dutch researchers have found vulnerabilities in TETRA \u2014 a radio technology used across the world to control critical infrastructure such as power grids, gas pipelines, and trains.\u00a0 The researchers, Job Wetzels, Carlo Meijer, and Wouter Bokslag of cybersecurity firm Midnight Blue, found a deliberate backdoor in the encryption algorithm of these radios \u2014 made by&#8230;<\/p>\n","protected":false},"author":1,"featured_media":584222,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/img-cdn.tnwcdn.com\/image\/tnw-blurple?filter_last=1&fit=1280,640&url=https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2023\/07\/radio-critical-infrastructure-hack.jpg&signature=23e2604e54c5cf02c5f81baa9efac980","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-584221","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/584221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=584221"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/584221\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/584222"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=584221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=584221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=584221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}