Industrial RF Controllers

The Security Risks of Industrial RF Controllers

The Internet of Things brings new innovations to industrial applications by making automation and remote control more practical and intelligent. As industrial engineers implement radio frequency controllers, new security risks are emerging that use them as a new attack vector. 

Trend Micro Research reported the results of a recent research project in an article that sheds light on the types of cyber attacks that industrial radio remote controllers make possible. “We found that it is possible to perform attacks within or out of RF range,” they concluded after creating an inconspicuous device that they could plant in an industrial setting. With it, they were able to access nearby industrial remote controllers and exploit vulnerabilities of the communication protocol used by current RF receivers. They dubbed it “RFQuack.”

How Trend Micro Found Vulnerabilities in RF Protocols

In order to exploit weaknesses in existing RF protocols, Trend Micro developed a series of devices that they could place in an industrial facility and use to communicate with remote controllers within range. After a number of experiments, they settled on a pocket-sized Arduino-based device that’s battery-powered and small enough to place in inconspicuously. They loaded it with exploit software and deployed it to demonstrate how RF protocols could be hacked by anyone with access to a facility.

How Does RFQuack Work?

Trend Micro designed RFQuack as a proof-of-concept device that’s controlled using Message Queuing Telemetry Transport (MQTT), Wi-Fi, 3G, or 4G communications. This means that an attacker could control it over a cellular internet connection or a local Wi-Fi connection.

Once deployed, RFQuack can be set up to wait until it receives a radio packet from a remote controller broadcasting in the area. It can be programmed to simply passively record the radio packet traffic it detects, or it can respond to radio controllers. Trend Micro developed a couple of different attacks that sent pre-determined commands to controllers or modified packets on the fly depending on what it received. 

The Types of Attacks RFQuack Could Execute

The researchers found that most RF receivers are not designed with security in mind. They developed a simple program that was able to passively receive a radio frequency packet and determine how to communicate with the receiver. Once RFQuack had retrieved the secret code used to pair an RF controller with a receiver, it was able to impersonate a controller and send commands to the equipment controlled by an RF receiver.

They were able to create custom commands to some industrial radio remote controllers or send E-STOP commands that disabled equipment by shutting it down. If the controller uses a known protocol, RFQuack is then capable of sending a start command to the receiver and begin controlling the equipment with documented RF commands.

How Systems Administrators Can Keep Industrial Radio Controllers Secure

Industrial remote controllers clearly are a security risk for facilities that can be accessed even temporarily by unauthorized personnel. If an attacker can plant a device like RFQuack within range of RF receivers, they could conduct similar operations to disable or damage equipment.

The first line of defense is choosing RF controllers that are secure. System designers installing industrial radio remote controllers should source them from vendors that use security features that disable receivers when a transmitter is out of range. Called virtual fencing, this feature makes it more difficult for an attacker to communicate with a remote controller.

Here are a few other recommendations Trend Micro suggests:

  • Check before purchasing RF controllers that the pairing codes can be custom configured
  • Change the pairing codes periodically
  • Select tamper-proof controllers that are difficult to reverse engineer
  • Use controllers that implement open RF communication protocols
  • Implement rolling-code systems that make hacking difficult

Given the critical nature of remote-controlled industrial equipment like construction cranes and hoists, it’s important to harden the remote controller technology used if the premises cannot be completely secured. Thanks to security firms like Trend Micro, industrial firms can stay a step ahead of the evolving cybersecurity threats that they face. 

Our systems don’t have these sort of issues because they are industrial rated and they operate with digital encoding and supervised transmission as well as frequency band selection.

216 replies
  1. hd says:

    Efektywnosc viagry przedkladanego za posrednictwem nas wstawiennictwa w limicie rehabilitacje kwestyj erekcyjnych stanowi w dniu nowoczesnym jedna sposrod dysponujacych bostwo indeks uciecha wlasnych odbiorcow. Godziwa diagnoza pobudowana na krzyz niepolskich fachowcow w gratisowych naradach medycznych jest w stanie w wydatny strategia ulozyc na nowo Twoje lekami na potencje zywot plciowe. Z wyjatkiem tradycyjnymi rezultatami w owym charakterze przekazujemy podobnie nienagannie przygotowana pomoc mailowa w celu lokalnych pacjentow. Ulysses Clozza

  2. hdfilmsitesi says:

    I wish to show my affection for your generosity in support of those people who should have assistance with that matter. Your real dedication to getting the message all through has been wonderfully significant and have without exception made somebody just like me to arrive at their objectives. Your own informative help denotes much a person like me and even more to my colleagues. Thanks a lot; from everyone of us. Erasmo Feeling

  3. superph11 says:

    Smart bankroll management is key in online gaming – especially with platforms prioritizing compliance like superph11 club. Secure registration & verified accounts (KYC) build trust – a solid foundation for responsible play! It’s good to see platforms taking these steps.

  4. million88 says:

    Interesting read! The Philippine online casino scene is definitely heating up. Quick registration with Million88 sounds appealing, especially with that fast ID verification. Check out million88 download apk for a streamlined experience – seems they prioritize user convenience!

  5. ph222ph says:

    Understanding RTP is key to enjoying slots – knowing those odds really changes how you play! PH222 PH seems to prioritize transparency, which is great. Check if ph222 ph legit offers clear RTP info – a solid platform should! I’m curious about their Megaways selection too.

  6. ph 799 says:

    Really interesting read! The focus on a streamlined, secure experience at PH 799 – like that quick registration – is key. Check out ph 799 app casino for a smooth, localized gaming platform. Great to see PAGCOR licensing too – builds trust!

  7. betvn1vip says:

    Alright, betvn1vip, let’s see what you got! Gave it a whirl, and it’s not bad, not bad at all. Good selection. Could use a little something extra, but overall, I’m feeling it. You might dig it too! betvn1vip

  8. cost of doxycycline says:

    I will immediately snatch your rss feed as I can’t in finding your e-mail subscription hyperlink or e-newsletter service. Do you’ve any? Please permit me understand so that I may subscribe. Thanks.

  9. zithromax medication says:

    I’ll immediately snatch your rss as I can’t find your email subscription hyperlink or e-newsletter service. Do you’ve any? Kindly permit me recognize in order that I could subscribe. Thanks.

  10. avanafil 50 mg tablet says:

    I will right away snatch your rss feed as I can not find your e-mail subscription link or e-newsletter service. Do you have any? Kindly allow me understand in order that I may just subscribe. Thanks.

  11. buy avanafil 200 mg says:

    I’ll right away take hold of your rss feed as I can’t to find your e-mail subscription link or e-newsletter service. Do you have any? Kindly permit me realize so that I could subscribe. Thanks.

  12. macrobid drug class says:

    That is very fascinating, You’re an excessively skilled blogger. I have joined your rss feed and stay up for in search of extra of your wonderful post. Also, I have shared your web site in my social networks

  13. lamisil says:

    I’m truly enjoying the design and layout of your website. It’s a very easy on the eyes which makes it much more enjoyable for me to come here and visit more often. Did you hire out a developer to create your theme? Great work!

  14. doxycyclin says:

    Hi! Someone in my Myspace group shared this website with us so I came to look it over. I’m definitely loving the information. I’m bookmarking and will be tweeting this to my followers! Superb blog and terrific design.

  15. furosemide 40 mg dosage says:

    I’m not sure where you’re getting your info, but good topic. I needs to spend some time learning much more or understanding more. Thanks for fantastic info I was looking for this information for my mission.

  16. ivermectin otc nc says:

    I’ll right away grab your rss feed as I can not in finding your e-mail subscription hyperlink or newsletter service. Do you’ve any? Please permit me recognize in order that I may subscribe. Thanks.

  17. doxycycline pill says:

    I will immediately snatch your rss feed as I can’t to find your e-mail subscription hyperlink or e-newsletter service. Do you’ve any? Kindly allow me understand so that I may subscribe. Thanks.

  18. tetracycline says:

    I’ll immediately grab your rss feed as I can’t find your e-mail subscription hyperlink or e-newsletter service. Do you have any? Kindly allow me recognize in order that I may subscribe. Thanks.

  19. cialis user side effects says:

    Hi, I do think this is an excellent web site. I stumbledupon it ;) I may come back yet again since i have saved as a favorite it. Money and freedom is the best way to change, may you be rich and continue to guide other people.

  20. phgaming says:

    phgaming casino|phgaming slots|phgaming download|phgaming app|phgaming register Experience top-tier online gaming at **PHGaming Casino**, the Philippines’ leading platform for premium **PHGaming slots** and live dealer games. **Register** at **PHGaming** today or perform a quick **PHGaming download** to access our mobile **PHGaming app** for non-stop action and big wins anytime, anywhere. visit: phgaming

  21. jiliaa says:

    Jiliaa Online Casino Philippines: Quick Jiliaa Login, Register & App Download for Top Slot Games. Experience the best of Jiliaa Online Casino Philippines! Enjoy quick jiliaa login, easy jiliaa register, and seamless jiliaa app download for top-tier jiliaa slot games. Join today for a premium gaming experience and start winning big! visit: jiliaa

  22. jl16 says:

    JL16 Login & Register: Best Slot Games, Official Link & App Download Philippines Experience the best jl16 slot games in the Philippines! Use our jl16 official link for secure jl16 login and jl16 register. Get the jl16 app download now to enjoy premium casino gaming, exclusive bonuses, and big wins on the go! visit: jl16

  23. filbet says:

    Filbet Philippines: Official Filbet Login & Register. Play Top Filbet Slot, Casino Games & App Download. Experience the best of Filbet Philippines! Access the official Filbet login and register page to play premium Filbet slot and casino games. Get the Filbet download for mobile and start winning today! visit: filbet

  24. like777 says:

    Like777: The Best Online Casino Philippines for Legit Slot Games & Real Money GCash Wins. Experience Like777, the best online casino Philippines for legit slot games and real money wins. Join the premier GCash online casino real money platform today and enjoy the most trusted online casino Philippines for real money experience with fast payouts and non-stop excitement. visit: like777

  25. panalobet says:

    Panalobet Online Casino: Best Slots in the Philippines. Easy Panalobet Login, Fast Register, and Mobile App Download for Non-Stop Gaming Action. Join Panalobet Online Casino, the top choice for the best slots in the Philippines. Experience easy Panalobet login, fast register, and Panalobet app download for non-stop gaming action and big wins today! visit: panalobet

  26. 18jili says:

    18jili Online Casino Philippines: Easy Login, Register & App Download for the Best Slot Games Experience the ultimate 18jili Online Casino Philippines! Enjoy easy 18jili login and register processes to play top-tier 18jili slot games. Secure your 18jili app download today for the best mobile gaming experience and exclusive rewards. visit: 18jili

  27. jljlph says:

    jljlph login|jljlph giris|jljlph register|jljlph app|jljlph download Experience premium online gaming at jljlph, the leading casino platform in the Philippines. Complete your jljlph register or jljlph login (giris) to access exclusive bonuses and top-tier slots. Secure your jljlph download for the official jljlph app and enjoy seamless mobile gaming anytime, anywhere! visit: jljlph

  28. 42vipph says:

    42vipph Online Casino Philippines: Easy Login, Register & App Download for Top Slot Games Experience the best at 42vipph Online Casino Philippines! Quick 42vipph login & 42vipph register to play top 42vipph slot games. Get the 42vipph app download now! visit: 42vipph

  29. 91ph says:

    91ph Casino: Official Login, Register & App Download. Play the Best 91ph Slots in the Philippines Today! Join 91ph Casino for the top 91ph slots in the Philippines! Secure your 91ph login, fast 91ph register, and easy 91ph app download to start winning big today. visit: 91ph

  30. viagra says:

    I am sure this article has touched all the internet visitors, its really really fastidious piece of writing on building up new webpage.

  31. lopressor medication says:

    I am not sure where you’re getting your information, but good topic. I needs to spend some time learning more or understanding more. Thanks for wonderful information I was looking for this information for my mission.

  32. how to get motilium says:

    I will right away clutch your rss as I can not to find your email subscription link or e-newsletter service. Do you have any? Please allow me recognise in order that I may subscribe. Thanks.

  33. priscillawheuer says:

    Fume Recharge Flavors deliver bold, refreshing taste with smooth vapor and consistent performance. Featuring vibrant fruit and sweet blends, they provide rich aroma and satisfying flavor for an enjoyable vaping experience.

  34. famotidine 40 mg dosage says:

    Hi, I do think this is an excellent website. I stumbledupon it ;) I may come back yet again since I saved as a favorite it. Money and freedom is the best way to change, may you be rich and continue to guide other people.

  35. mesalamine says:

    I’ll right away take hold of your rss feed as I can not to find your email subscription hyperlink or e-newsletter service. Do you’ve any? Please let me recognize in order that I may just subscribe. Thanks.

  36. order asacol sale says:

    Pretty nice post. I just stumbled upon your blog and wanted to say that I’ve truly enjoyed surfing around your blog posts. In any case I’ll be subscribing to your feed and I hope you write again soon!

  37. luckystarz says:

    The RFQuack research reveals a critical vulnerability in industrial IoT security. As someone who works with secure digital platforms daily, I can’t stress enough how important protocol-level security is. Much like how we ensure transaction security in luckystarz games, industrial systems need robust encryption and authentication. Great article highlighting these emerging threats.

  38. ciprofloxacin 500 mg says:

    I’ll immediately clutch your rss feed as I can not in finding your email subscription link or e-newsletter service. Do you’ve any? Please let me realize in order that I may just subscribe. Thanks.

  39. avodart says:

    I will right away seize your rss as I can’t to find your email subscription link or e-newsletter service. Do you’ve any? Please permit me understand in order that I may subscribe. Thanks.

  40. macrobid for uti says:

    Your style is very unique compared to other people I have read stuff from. I appreciate you for posting when you have the opportunity, Guess I will just book mark this web site.

  41. propecia says:

    Hey there! I’ve been reading your website for a long time now and finally got the courage to go ahead and give you a shout out from Lubbock Tx! Just wanted to say keep up the excellent job!

  42. minoxidil for men says:

    I simply couldn’t go away your web site prior to suggesting that I actually enjoyed the usual information an individual supply on your visitors? Is gonna be back continuously to check up on new posts

  43. toprol says:

    Hi! I’ve been reading your website for a long time now and finally got the courage to go ahead and give you a shout out from Houston Tx! Just wanted to mention keep up the great work!

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *