CHERNOVITE's PIPEDREAM Malware Targeting Industrial Control Systems (ICS)
Summary: Dragos identified and analyzed PIPEDREAM, a modular ICS attack framework developed by the CHERNOVITE activity group, in early 2022 through its normal business, independent research, and partner collaboration. PIPEDREAM is the seventh known ICS-specific malware and can execute 38 percent of known ICS attack techniques and 83 percent of known ICS attack tactics, targeting Omron and Schneider Electric controllers plus CODESYS, Modbus, and OPC UA.
What you should know: Dragos assesses with high confidence that PIPEDREAM has not yet been used in the wild for destructive effects, but its native-functionality approach could work across hundreds of different controllers, so a focus on the equipment vendor is misplaced and the adversary's tactics and techniques are what matter.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026