S0604 Industroyer
malwareEnterpriseICSplatformsWindows
also known asIndustroyer · CRASHOVERRIDE · Win32/Industroyer
Industroyer is a sophisticated malware framework designed to cause an impact to the working processes of Industrial Control Systems (ICS), specifically components used in electrical substations. Industroyer was used in the attacks on the Ukrainian power grid in December 2016. This is the first publicly known malware specifically designed to target and impact operations in the electric grid.
techniques used (44)
ATT&CK techniques this enables or maps to.
used by groups (1)
Threat groups associated with this.
used by campaigns (1)
Campaigns that use this.
source
Where this definition is published.
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan