Triton malware can bring down critical industrial infrastructure
Security firm FireEye has discovered yet another dangerous malware program that can wreak havoc with industrial control systems in nuclear plants, oil refineries, and other installations, leading to actual physical damage.
Dubbed Triton, or Trisis, it’s a family of malware that’s designed to attack industrial complexes. Recently, an undisclosed organization was under the attack of Triton.
“The attacker targeted the SIS suggesting an interest in causing a high-impact attack with physical consequences. This is an attack objective not typically seen from cyber-crime groups,” said FireEye.
The attackers managed to gain remote access to an SIS (Safety Instrumented System) engineering workstation and deployed the Triton attack framework to reprogram the SIS controllers. The attack led to the shutdown of the industrial process.
Related content
- Websense Updates TRITON Solution
- New Stuxnet-like Malware Discovered in the Wild
- DeepLocker: An AI Powered Malware
- Serious Flaw in Microsoft Word is Being Used to Install Malware
-
Open source forensics for adaptive detection of threats on CRITIS networks
The open source tool Velociraptor is at the heart of a solution that automatically detects cyber threats in industrial environments, offering a defensive strategy and protecting critical infrastructures.