CHERNOVITE is a threat activity group who built a toolset tailored to disrupt a broad range of industrial control systems, dubbed PIPEDREAM. This malware represents only the 7th malware tailored to ICS operations. We will discuss CHERNOVITE in context to the overall ICS threat landscape and describe how PIPEDREAM can be used to attack asset owner’s industrial facilities.


RSA® Conference, the world’s leading information security conferences and expositions, today concluded its 31st annual event at the Moscone Center in San Francisco. The year’s event attracted over 26,000 attendees, including 600+ speakers, 400+ exhibitors, and over 400 members of the media. Throughout the week, attendees networked on the expo floor and participated in keynote presentations, track sessions, tutorials, seminars, and special events.

Several of the most pressing topics discussed during this year’s Conference included issues surrounding privacy and surveillance, the positive and negative impacts of machine learning and artificial intelligence, the nuances of risk and policy, and cybersecurity-focused innovations across crypto and blockchain.

CHERNOVITE and PIPEDREAM: Understanding the Latest Evolution of ICS Malware

Conference: RSA Conference 2022

Abstract

Post a comment

Related work

Uncovering “BadAlloc” Memory Vulnerabilities in Millions of IoT Devices

Through the Eyes of the Attacker: Designing Embedded Systems Exploits for Industrial Control Systems

Charged by an Elephant – An APT Fabricating Evidence to Throw You In Jail

Talent Need Not Apply: Tradecraft and Objectives of Job-themed APT Social Engineering

Perimeter Breached! Hacking an Access Control System

Decade of the RATs – Custom Chinese Linux Rootkits for Everyone