Smart UPS Models From APC Have Been Hacked
It’s been a while since I have sent out a security alert. I tend not to bother with alerts that have been reported in the mainstream media. This alert concerns “Smart” uninterruptible power supplies (UPS) aka a “Battery Backup,” carrying the APC brand.
I recommend UPS products to my clients because they keep your computer running for a short period after your home or business loses power. This gives you the opportunity to save your work and tidy things up before the UPS battery shuts down your computer.
The new generation of “Smart” UPS devices can be controlled remotely, and it is those internet-connected devices that have been hacked. If you are using a consumer-grade UPS (such as the Back-UPS series), this message does not apply to you.
However, if you are using a Smart-UPS model from APC, you must take steps immediately to prevent the following issues:
- malicious damage to your battery
- damage to the equipment connected to your battery
- theft or corruption of information on any of the computers on the same network as your battery
You may read more about this issue here. Please follow the instructions pertinent to your specific model.
If you have any questions, please don’t hesitate to reach out.
Jack Eisenberg, Owner
Safe and Secure Computing
P.S. As a consequence of the Russia-Ukraine conflict, there has been a significant uptick in hacking events as well as scams related to Ukraine relief. Please be careful of any unsolicited email you receive, as it may contain malicious content or fraudulent pleas for assistance.