CRASHOVERRIDE and Win32/Industroyer

Both Dragos and ESET released two reports on the analysis of malware attacking power grids.

According to Dragos the adversary group labeled as ELECTRUM is responsible for the cyber attack on the Ukraine electric grid in 2016.

I created a mindmap based on the info in the Dragos document. It’s available on https://github.com/cudeso/tools/tree/master/CRASHOVERRIDE

Resources

• https://www.us-cert.gov/ncas/alerts/TA17-163A
• https://www.welivesecurity.com/wp-content/uploads/2017/06/Win32_Industroyer.pdf
• https://dragos.com/blog/crashoverride/