ICS/OT CYBERSECURITY
Image Description
Common Information
Type Value
UUID e735a01a-2955-4661-8dae-5511bf605ab6
Fingerprint 644aa01bdd436e07a42c8c8160297ede27bc8abb7f455d5721cdbf190ce04722
Analysis status DONE
Considered CTI value 1
Text language
Published Feb. 25, 2023, 2:17 p.m.
Added to db March 12, 2024, 7:23 p.m.
Last updated Aug. 31, 2024, 5:37 a.m.
Headline ICS/OT CYBERSECURITY
Title ICS/OT CYBERSECURITY
Detected Hints/Tags/Attributes 342/4/25
Attributes
Details Type #Events CTI Value
Details Domain 19
www.politico.com
Details Domain 36
media.defense.gov
Details Domain 98
www.ncsc.gov.uk
Details Domain 182
www.mandiant.com
Details Domain 3
portal.dragos.com
Details Domain 56
www.dragos.com
Details Domain 170
www.sans.org
Details Domain 4127
github.com
Details Domain 2
www.codesys.com
Details Domain 3
www.modbus.org
Details Domain 3
opcfoundation.org
Details Domain 114
dragos.com
Details File 3
csa-apt5-citrixadc-v1.pdf
Details Github username 48
microsoft
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 19
DEV-0270
Details Threat Actor Identifier - APT 41
APT5
Details Url 3
https://www.politico.com/news/2022/02/25/russian-ransomware-gang-threatens-countries-
Details Url 3
https://media.defense.gov/2022/dec/13/2003131586/-1/-1/0/csa-apt5-citrixadc-v1.pdf
Details Url 1
https://www.ncsc.gov.uk/news/joint-advisory-shows-new-sandworm-malware-cyclops-blink-
Details Url 1
https://www.mandiant.com/resources/blog/ukraine-and-sandworm-team
Details Url 3
https://portal.dragos.com/#
Details Url 1
https://www.dragos.com/threat/electrum
Details Url 1
https://www.dragos.com/threat/covellite
Details Url 4
https://www.sans.org/white-papers/five-ics-cybersecurity-critical-controls
Details Url 2
https://github.com/microsoft/sbom-tool