Industroyer Targets Energy Plants – Daily Security Byte

For over a decade, security experts and pundits have warned that hackers could potentially target utilities and power plants and cause significant physical security incidents like power outages. In the past few years, the industry has seen a number of power incidents, like the Ukrainian blackout last year, which many claimed was caused by cyber attacks. However, this past week we finally have more concrete proof of attackers targeting utilities. Watch today’s video to learn about a new malware sample that specifically targets energy infrastructure.

Episode Runtime: 3:27

Direct YouTube Link: https://www.youtube.com/watch?v=kbKWtn_jFug

EPISODE REFERENCES:

• Crash Override can crash energy grids – Ars Technica
• Research blog post on Industroyer power plant malware  – WeLiveSecurity
• Whitepaper on Industroyer malware [PDF] – WeLiveSecurity
• Whitepaper on Crash Override [PDF] (same malware, different name) – Dragos

Corey Nachreiner, CISSP (@SecAdept)