Industroyer

COSMICENERGY: ‘Russian’ Threat to Power Grids ICS/OT

COSMICENERGY: ‘Russian’ Threat to Power Grids ICS/OT

| | COSMICENERGY, electric grid, electrical grid, Electrical grids, energy grid, grid cyber attack, ICS, IEC 60870-5-104, IEC-104, INCONTROLLER, Industroyer, Industroyer2, Malware, OT, power grid, Power-Grid Security, Red Team, Red team exercises, red team operations, red team testing, Red Teaming, Red Teams, red-team-tools, redteam, Russia, Russia Exodus, Russia power grid, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, russian, Russian Cyber War, SB Blogwatch, Solar Polygon, triton, TRITON ICS malware, Triton malware
Shouty name—dangerous game. Red-team tool ripe for misuse ...
Security Boulevard
Russia ‘Plans’ HUGE Cyberattack on Critical Infrastructure

Russia ‘Plans’ HUGE Cyberattack on Critical Infrastructure

| | BlackEnergy, Did you get C&C of that water plant yet? No? Off to the front lines with you!, ICS, Industrial Control System Security, industrial control systems, Industroyer, Industroyer2, Russia, SB Blogwatch, Ukraine
The Ukrainian government has warned that Russia is planning a massive attack against the critical infrastructure of Ukraine and of its allies ...
Security Boulevard
Industroyer2 trying to connect to TCP port 2404 on 10.82.40.105, 192.168.122.2 and 192.168.121.2

Industroyer2 IEC-104 Analysis

| | 10.82.40.105, 192.168.121.2, 192.168.122.2, 40_115.exe, 60870-5-104, CRASHOVERRIDE, ICS, IEC-104, Industroyer, Industroyer2, SCADA, Ukraine
The Industroyer2 malware was hardwired to attack a specific set of electric utility substations in Ukraine. It seems to have been custom built to open circuit breakers, which would effectively cut the ...
NETRESEC Network Security Blog
Russia Tries to Kill Ukraine’s Power Grid—and FAILS

Russia Tries to Kill Ukraine’s Power Grid—and FAILS

| | electric grid, ICS, Industroyer, Industroyer2, power grid, Russia, Sandworm, Sandworm hackers—are they working for the Harkonnen?, SB Blogwatch, SCADA, Ukraine
Russia’s infamous Sandworm APT group is at it again: The scrotes have been trying to cut power to the Ukrainian capital ...
Security Boulevard
Backdoor Links 2016 Ukrainian Blackout to Sandworm APT and NotPetya

Backdoor Links 2016 Ukrainian Blackout to Sandworm APT and NotPetya

| | APT group, backdoor, BlackEnergy, cyberespionage, Exaramel, Industroyer, Sandworm, TeleBots
Analysis of a new backdoor program allowed malware researchers to establish clear links between the cyberattacks that led to power outages in Ukraine in 2015 and 2016 and the NotPetya ransomware outbreak ...
Security Boulevard