New ICS Threat Activity Group: KAMACITE
Summary: Dragos disclosed KAMACITE as one of four new ICS threat activity groups in its ICS Cybersecurity 2020 Year in Review, describing a set of related behaviors targeting electric utilities, oil and gas operations, and manufacturing since at least 2014. The group facilitated ICS-specific operations including the BLACKENERGY2 campaign and the 2015 and 2016 Ukraine power events, and typically hands operational control to other entities such as ELECTRUM to execute disruptive effects while it maintains long-term access.
Key Takeaway: KAMACITE is linked to potentially five major ICS cybersecurity events, two of which resulted in disruption, and Dragos tracked its continued activity across Western Europe and the U.S. from 2017 to the present - meaning the access-enabling work behind the 2016 Ukraine grid attack is still running against energy and government targets.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026