Detecting CHERNOVITE’s PIPEDREAM with the Dragos Platform
Summary: Dragos reports that PIPEDREAM, the seventh known ICS-specific malware, was developed by the activity group it designates CHERNOVITE and can disrupt, degrade, and potentially destroy industrial environments and processes. It can manipulate programmable logic controllers and other equipment including Omron and Schneider Electric hardware, attack CODESYS, Modbus, and OPC UA, and is believed capable of executing at least 38 percent of known ICS attack techniques and 83 percent of known ICS attack tactics, through five integrated utilities Dragos labels EVILSCHOLAR, BADOMEN, MOUSEHOLE, DUSTTUNNEL, and LAZYCARGO.
What you should know: A single malware family assessed at 83 percent of known ICS attack tactics is built to reach the physical process, not the IT estate, and it targets controllers from Omron and Schneider Electric plus the widely deployed CODESYS, Modbus, and OPC UA technologies.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026