Johnson Controls Cyber Attack Explained: Impact and Mitigation Strategies

The recent cyberattack on Johnson Controls has a lot of people concerned and many organizations wondering what they need to do to help secure their networks. In this video we give a brief overview of what has happened and what is currently known about the incident. We also talk about a few steps taken to help keep network data safe.
My Website: systemcontroltech.net/
Facebook: systemcontroltech
NETGEAR 5-Port Gigabit Ethernet Unmanaged Switch amzn.to/30d9DST
Cable Matters 5-Pack Snagless Short Cat6 Ethernet Cable amzn.to/2zbLIbk
Onicon Controller: amzn.to/3eYEyXh
Onicon Insertion Flow Meter: amzn.to/3eMQDOU
Support the channel by becoming a Patreon: www.patreon.com/systemcontroltech
Here are some of the things I keep in my tool bag.
Backpack: amzn.to/2tDnYsC
My screwdriver: amzn.to/2uPyIDV
Small fuse puller: amzn.to/2uPIdDk
Combination fuse puller: amzn.to/2vB0dPf
Adjustable wrench: amzn.to/2us3akS
USB to Serial converter: amzn.to/2vAKHTD
Network cable: amzn.to/2vBpJE0
Network switch: amzn.to/2eHsIa7
Hex Key set: amzn.to/2eHvA6C
Fluke meter: amzn.to/2tDaZHj
Fluke temperature meter: amzn.to/2tDxnQO
Dell 32 bit laptop: amzn.to/2us2Z9n
Serial cable: amzn.to/2eHvyf8
Johnson Controls DX-9100-8454 amzn.to/38VgLni
Johnson Controls DX-9100-8990 Back Panel: amzn.to/2IPQa0H
Johnson Controls AS-UNT110-1 - UNT Controller amzn.to/32CVnBB
Johnson Controls, Inc. Unt Series Unitary Controller amzn.to/2SpZCM9
METASYS AP-VMA-1440-0 APVMA14400, VMA Controller, amzn.to/2St5eW3
Johnson Controls, Inc. Fx Vma amzn.to/2XWEPFS
Johnson Controls Metasys NAE MS-NAE5521-0 amzn.to/2Yhyvbn
TRENDnet USB to Serial Converter, amzn.to/2JOxH4y
Johnson Controls T-4000-119 Allen Head Adjusting Tool: amzn.to/2Ygf7LS
Johnson Controls T8590 Residential High-Resolution Color Touch Screen Digital Room Thermostat amzn.to/2JVUhZf
Johnson Controls A99BB-600C Penn Series A99 PTC Temperature Sensor amzn.to/2Ycet1R
Johnson Controls P70LB-6C Dual Pressure Control, SPST amzn.to/2YhO8zq
Johnson Controls VA-4233-AGA-2 Electric Actuator, amzn.to/2JVVcZH
JOHNSON CONTROLS METASYS MS-FEC2610-0 MS-FEB2610-0 CONTROLLER amzn.to/2JT1Qj8
Johnson Controls M9220-GGA-3 amzn.to/32HRVpm

[@gm3353]

how did they get in? MGM style? Call the desk get okta reset, superadmin, install IDP sniff pw's?

[@Systemcontroltech]

Not sure

[@ninjatrader4976]

They used ​ChangeThi$Pa$$w0rdN0w!

[@dustinmalvaso7829]

Makes me wonder, i work on site at a MGM that just had a massive cyber attack, is it one in the same 🤔

[@Neo_Montana]

It's interesting to note the recent news about MGM being hacked by S.S. and the absence of mention regarding J.C. In these instances, we should consider the nuances. These are two distinct companies, each with unique business models. When groups or teams engage in hacking activities, they often leave behind a 'calling card.' In this case, MGM by S.S. and JC by D.D.A. showcase differences in their approaches, suggesting variations in their techniques. It's improbable that two different groups would employ precisely the same technique, indicating that they are not necessarily one and the same.

[@elmo319]

It was a dormant piece of malware

[@sonalpatil3954]

KARMA is there... 😅

[@Systemcontroltech]

It started in Asia from what I've heard

[@ninjatrader4976]

For the amount of money that they charge customers, they shouldn't have a problem paying the ransom. I usually have to go in after the jci techs to fix stuff. Their IT staff must be on the same level as the techs they are hiring.

[@lance16O1]

Somebody's getting rich

[@danielhumphrey5231]

Every controls company has it's great, mediocre and bad technicians.

[@bryansitka]

I've worked with many techs from many different control companies. Some have sucked. Some haven't.

[@BZ_1994]

I work for them, my branch is full of the smartest techs so.

[@jeffmurphy9987]

I also work for JCI as a technician on the fire alarm side. Can only speak for our small group of six fire techs but they all have decades of experience and it would be hard to find a better group of technicians. We get calls from our customers that have went with other companies because their cheaper to fix things the can’t figure out. This is definitely a weekly occurrence where our competitors are clueless and we can usually fix it in a reasonable amount of time.