A highly capable malware reportedly used in a failed attempt to blow up a Saudi petrochemical plant has now been linked to a second compromised facility.<\/p>\n
Researchers at the US-based security research firm, FireEye say the unnamed \u2018critical infrastructure\u2019 facility was the latest victim of the powerful Triton malware, the umbrella term for a series of malicious custom components used to launch directed attacks.<\/p>\n
Triton is designed to burrow into a target\u2019s networks and sabotage their industrial control systems, often used in power plants and oil refineries to control the operations of the facility. By compromising these controls, a successful attack can cause significant disruption \u2014 even destruction.<\/p>\n
According to the security company\u2019s latest findings released last week, the hackers waited almost a year after their initial compromise of the facility\u2019s network before they launched a deeper assault, taking the time to prioritize learning what the network looked like and how to pivot from one system to another. The hackers\u2019 goal was to quietly gain access to the facility\u2019s safety instrumented system, an autonomous monitor that ensures physical systems do not operate outside of their normal operational state.<\/p>\n
These critical systems are strictly segmented from the rest of the network to prevent any damage in the event of a cyberattack. But the hackers were able to gain access to the critical safety system, and focused on finding a way to effectively deploy Triton\u2019s payloads to carry out their mission without causing the systems to enter into a safe fail-over state.<\/p>\n
FireEye did not clarify the type of facility or its location \u2014 or even the year of the attack, but said it had the potential to cause physical damage.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
A highly capable malware reportedly used in a failed attempt to blow up a Saudi petrochemical plant has now been linked to a second compromised facility. Researchers at the US-based security research firm, FireEye say the unnamed \u2018critical infrastructure\u2019 facility was the latest victim of the powerful Triton malware, the umbrella term for a series […]<\/p>\n","protected":false},"author":1,"featured_media":10249,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[],"class_list":["post-10256","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"yoast_head":"\n