A new kind of malware goes after industrial safety systems that provide emergency shutdown capabilities. It can cause damage or shut down operations.
The malware — which FireEye calls Triton and Dragos calls TRISIS — is similar to the Stuxnet malware used in Iran in 2010 and Industroyer deployed in Ukraine in 2016. A recent Triton attack targeted Schneider Electric’s Triconex safety system, and the malware has already had at least one victim, the security research firms reported.