ESET: Industroyer the biggest threat since the Stuxnet era

ESET researchers analyzed samples of malware - detected by ESET as Win32 / Industroyer - that are capable of attacking power supply infrastructures. Industroyer

There is a strong possibility that this malware will be involved in the attack on Ukraine's electricity grid in December of 2016, which has led to a power cut in the capital of the country, Kiev, for an hour.

Discover more articles in search results.

"The attack on the Ukrainian electricity grid will have to alert everyone who is responsible for the security of critical systems at the global level, warns Anton Cherepanov, Senior Malware Researcher of ESET.

ESET researchers have discovered that Industroyer can directly control electrical substation switches and circuit breakers. It uses industrial communications protocols used worldwide for power supply, transport control systems and other critical infrastructures. Possible impacts may range from a single power failure, which will result in a series of failures, even to severe damage to the equipment.

 

Illustration of its operation Industroyer from ESET

"Industroyer's ability to remain in the system and be able to intervene directly in the operation of industrial infrastructures makes it the most dangerous threat of malware for industrial control systems than the famous Stuxnet that had managed to attack Iran's nuclear program and was discovered 2010 ", says Anton Cherepanov.

Detailed information about malware, as well as IOC (Indicators of Compromise) indicators, can be found in the relevant article and an extensive whitepaper on ESET's blog, WeLiveSecurity.com.


Google preferences

Leave a Comment

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).