If you are wondering how an attacker got credentials to Oldsmar's ICS network, I know where you could look first. pic.twitter.com/38SObhQvd2

— Ben Goerz (@bengoerz) February 10, 2021