IoT related vulnerabilities are high for agriculture

Malware and ransomware attacks from criminal groups involve malicious software that infiltrates computer systems, compromising data integrity and disrupting operations. These attacks can have severe consequences in the food and agriculture sector. For example, malware could infect control systems, leading to the compromise of critical infrastructure such as irrigation systems or food processing plants. Ransomware attacks can encrypt vital data, making it inaccessible until a ransom is paid. Notable examples include the NotPetya attack on the Danish shipping company Maersk in 2017, which disrupted global supply chains; and the LockerGoga ransomware attack on Norsk Hydro in 2019, one of the world's largest aluminum manufacturers. More recently, ransomware attacks against JBS (2021), Hood Dairy (2022), and Dole (2023) highlight the growing interest these criminal groups have with large companies in the sector.

Social engineering and phishing techniques exploit human vulnerabilities to gain unauthorized access to systems or obtain sensitive information. Typically, employees are targeted through fraudulent emails or phone calls, tricking them into divulging credentials or downloading malicious software. Other methods include distributing infected USB thumb drives at trade shows, or using a QR code to point to a website that hosts malicious software. Attackers can impersonate suppliers, regulators, or colleagues to gain trust and manipulate victims. These attacks can result in unauthorized access to critical systems or the theft of sensitive data. A notable instance is the 2019 phishing attack on the UK's Food Standards Agency, where employees were targeted with fake emails requesting login credentials.

Supply chain attacks target vulnerabilities in the interconnected network of suppliers, distributors, and service providers. These attacks can disrupt the entire supply chain, leading to compromised food safety or delays in delivery. Adversaries can compromise third-party vendors, introducing malicious code or tampering with products during transportation. Most infamously, the 2020 SolarWinds incident impacted over 18,000 businesses and government agencies around the world. The malicious code was delivered to victims via updates to SolarWinds products, which went undetected for nearly six months.

Denial of service (DoS) and distributed denial of service (DDoS) attacks overload networks or systems, rendering them unavailable to authorized users. In the past, these attacks primarily targeted online services such as websites or email, preventing customers from accessing resources or placing orders. As new technologies emerge, DoS or DDoS attacks against operational technology (OT) systems can impact critical infrastructure, such as sensor networks or equipment control systems. Precision agriculture tools dependent on sensors in farm fields connected by insecure wireless networks are prime targets for this type of attack.

Insider threats involve individuals within an organization who misuse their access privileges or exploit their position to compromise systems or steal sensitive information. Malicious insiders can compromise food safety, steal intellectual property, or sabotage critical operations. Insiders may be motivated by financial gain, disgruntlement, or coercion. Organizations must implement strict access controls, monitoring mechanisms, and employee awareness programs to mitigate this type of threat.

The Internet of Things (IoT) refers to interconnected devices that collect and exchange data. IoT devices play a crucial role in areas such as precision agriculture, crop monitoring, supply chain management, food processing, and food traceability. However, vulnerabilities in these devices can be exploited by threat groups to gain unauthorized access, disrupt operations, or tamper with data. For example, compromised IoT devices in agricultural settings could result in inaccurate data collection, leading to suboptimal crop management. Most IoT devices are small and have limited amounts of computing power. When connected in large "botnets" of compromised devices, they can be used as a distributed system for cracking passwords, mounting attacks against other systems, or spreading malware. IoT devices are not just fixed and stationary—drones used in agriculture are an emerging technology that will be targeted for exploitation if not properly secured.