We have become aware of a large #ICS/#SCADA malware project apparently conducted under a state contract on behalf of the Russian General Staff Main Intelligence Directorate (#GRU), Main Centre for Special Technologies (#GTsST), military unit 74455.
This military unit also known as #Sandworm is located at the GRU Ulitsa Kirova facility in the Khimki suburb of Moscow. In the past Sandworm has targeted ICS/SCADA, one of the most renowned being the #INDUSTROYER2 hacking attempt of a Ukrainian electrical substation in April 22.
The ongoing project is to cost more than 100 million rubles across three phases and undertaken by several technical defense contractors.
We know of one contractor which was to receive in excess of 20 million rubles to purchase and develop capabilities against, most notably, Schneider Electric Modicon M251 and Omron NJ500. Have you seen these pieces of equipment mentioned anywhere recently?
@threadreaderapp unroll
• • •
Missing some Tweet in this thread? You can try to
force a refresh
