S1165 FrostyGoop

malwareICS

platformsControl Server · Field Controller/RTU/PLC/IED

also known asFrostyGoop · BUSTLEBERM

FrostyGoop is a Windows-based binary written in Golang that allows for interaction with industrial control system (ICS) equipment via Modbus TCP over port 502. FrostyGoop allows for reading and writing data to holding registers on targeted devices, manipulating the operation of systems for malicious purposes. FrostyGoop is associated with the FrostyGoop Incident in Ukraine.

01

techniques used (5)

ATT&CK techniques this enables or maps to.

02

used by campaigns (1)

Campaigns that use this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan