Dragos, Inc.’s Post

Link here to our intelligence brief on FrostyGoop, the ninth ICS-specific malware in history. This malware was leveraged to attack a municipal utility in Ukraine that served power to 600 apartment buildings in the middle of winter (Jan 2024). The result was the loss of heating to thousands of civilians who were forced to endure sub-zero temps in their homes for a period of days. "Industrial cybersecurity firm Dragos disclosed Tuesday FrostyGoop, a ninth malware that targets industrial control systems (ICS) and the first to utilize Modbus TCP communications to impact OT (operational technology) operations. Initially identified by Dragos in April this year, FrostyGoop can interact directly with ICS using Modbus, a standard ICS protocol across industrial sectors and organizations worldwide, posing a significant threat to critical infrastructure installations across sectors." (link to article in comments) #dragos #icscybersecurity #otcybersecurity #threatintelligence #malware #criticalinfrastructure

Check out this ICS specific malware that exploits a common OT protocol!

🚨 Cyberattack on one of the Ukrainian Energy Sectors Disrupts 600 Apartments. Despite FrostyGoop being the 9th ICS-specific malware, and despite it using Modbus TCP, which indicates attackers are becoming more mature in stage 2. Previously, adversaries used to attack to steal information, destroy databases, or manipulate certain data. But NOW they are far more advanced. With us relying more and more on the Cyber world for our daily activities, attacks now not only impact the cyber world but also the physical world. Blowing up a gas plant, disrupting the energy and electric sector during cold/hot weather, disturbing the transportation sector – literally, it can paralyze a country. With all that being said, if you are a platform owner, deploy the latest Knowledge Pack and perform retrospective searches for signs of the malware. If you are not, implement these 5 Critical Controls: 1. ICS Incident Response 2. Defensible Architecture 3. ICS Network Visibility & Monitoring 4. Secure Remote Access 5. Risk-Based Vulnerability Management To read more about it, download our report from the link below from Dragos, Inc. #CyberSecurity #ICS #Malware #EnergySector #CriticalInfrastructure #IncidentResponse #NetworkSecurity #VulnerabilityManagement #DigitalTransformation #CyberThreats #RiskManagement #NCA #SaudiArbia #OTCC #Dragos #dragosArabia #DragosKSA

Did you hear about FrostyGoop? The 9th ICS specific malware, and the first ICS-specific malware that uses Modbus TCP communications to achieve an impact on OT. If you are an asset owner in the energy sector or in cyber protecting them, please take a look 👇

The global cyber threat environment continues to escalate - see the report below. It’s important that security leaders understand the threat, and if you have an OT environment make sure your leadership is aware. This should help you to get resources for an OT security program, and bottom line is that as security leaders it is our responsibility to ensure that company leaders are aware of the risk.

More and more ICS targeted malware are becoming prevalent. Currently impacting the energy sector, but I would consider all utilities at risk. I do enjoy the names they get, though. Frostygoop has a certain ring to it. #OTSecurity #ICSSecurity #Frostygoop

📣 Just released! Download the FrostyGoop ICS Malware Intelligence Brief covering the recent cybersecurity incident affecting the energy sector. In our report, we cover the OT cybersecurity weaknesses exploited by cyber adversaries and offer actionable insights on how to protect against the threat. #icscybersecurity #otcybersecurity #industrialcybersecurity #DragosIntel #DragosPlatform

🔥 Download a recent report from Dragos WorldView OT Cyber Threat Intelligence, “Impact of FrostyGoop ICS Malware on Connected OT Systems.” This report is A MUST-READ for anyone concerned about cybersecurity in industrial settings. 💡 Learn about the latest OT cybersecurity threats and how to defend against them. Download now -> https://hubs.la/Q02HK00b0 #icscybersecurity #otcybersecurity #industrialcybersecurity #FrostyGoop #DragosIntel #DragosPlatform

Raspberry Robin malware exemplifies the evolving cyber threat landscape. Its use of sophisticated exploits and adaptability, including spreading via Discord, demands proactive cybersecurity measures. Regular software updates, employee training, and strong access controls are key to defense. The Check Point analysis urges immediate action to stay ahead of such cunning threats. Your thoughts on evolving cybersecurity strategies? Join the discussion. #Cybersecurity #RaspberryRobin #ProactiveDefense Original article: https://lnkd.in/e3VQ7FZH

ICYMI, here's a snippet of David Kennedy talking through a scenario where he ran into deception in a red team engagement and the affect this had on him. Want to hear the rest? Go to the link in our post! #deception #infosec #threatdetection #cybersecurity