Analyzing PIPEDREAM: Results from Runtime Testing
Summary: Dragos ran PIPEDREAM, the seventh known ICS malware and the first cross-industry scalable ICS attack framework, against real hardware and found it could drive a mock water pipeline's pressure from 15 PSI to 100 PSI, close the solenoid valve, and deadhead the pump. Testing also confirmed logic corruption on CODESYSv3 and Omron NX/NJ controllers, manipulation of Omron 1S-series servo drive parameters, and use of CVE-2022-34151 hard-coded credentials, while BADOMEN could not reach Omron SL3300 safety controllers because it lacks the nxbus.fcgi endpoint.
Key Takeaway: Dragos reports that it fixed EVILSCHOLAR's broken CODESYS code in a couple of weeks, which means the CHERNOVITE group behind a toolkit already capable of pipeline disruption and servo manipulation is a short development cycle away from the safety-controller access it currently lacks.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026