Skip to content

S1004 Industroyer

Industroyer is a sophisticated piece of malware designed to cause an Impact to the working processes of Industrial Control Systems (ICS), specifically ICSs used in electrical substations.1 Industroyer was alleged to be used in the attacks on the Ukrainian power grid in December 2016.2[^CISA Alert (TA17-163A])45

Item Value
ID S1004
Associated Names
Version 1.0
Created 31 May 2017
Last Modified 21 October 2021
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use