Who is taking over these systems is not the issue. The issue is the fact these systems are internet accessible at all. These systems should not have internet access..at all. They are not hardened against intrusions, are not designed to be hardened in this way, and giving them remote access in any way is asking for trouble. It does not take state level actors to take over these kind of systems…they are so easy to compromise even an amateur could take them over. Ignore the noise about Iran or China…this is the fault of the network operators..not the actors that found devices foolishly placed on the intenet.
