Israeli ICS

The organisation is referred to by the alias Israeli ICS. Its headquarters is located in Israel. It operates in the field of industrial control systems.

On September 14, 2022, the pro‑Palestine hacktivist group GhostSec carried out an attack on Israeli industrial control systems. The attackers focused on internet‑exposed programmable logic controllers (PLCs) and a human‑machine interface (HMI) that controlled a hotel pool. They gained access by exploiting default credentials and by locating the devices through the Shodan search engine. GhostSec demonstrated administrative access, including the ability to halt a PLC, and claimed control over water safety parameters. Subsequent analysis indicated that the direct operational impact was limited because the compromised systems had restricted process configuration controls. Although the pool’s parameters could be altered, posing potential health risks, the attackers did not cause substantive disruption to the underlying processes. The incident was noted by security researchers as illustrating how easily poorly secured ICS devices can be accessed and how hacktivists may leverage perceived critical‑infrastructure threats for psychological effect. It also underscored the importance of changing default credentials and reducing the exposure of industrial equipment to the public internet.