Hackers exploited discontinued web server at Tata Power, says Microsoft

Microsoft has warned that state-sponsored hackers are attacking critical energy infrastructure in India via exploiting a discontinued web server, with the most recent attack it observed was on Tata Power in October.

Microsoft security researchers discovered a vulnerable open-source component in the “Boa web server” still being used in routers, security cameras and popular software development kits (SDKs), despite its retirement in 2005.

Tata Power last month admitted it was hit by a cyber attack on its IT infrastructure. The power company, however, said that all its critical operational systems were functioning normally.