Michael Yip | yip@infosec.exchange

Notable discovery from @DragosInc on a newly weaponized ICS capability referred to as "FrostyGoop" used in a real-world disruptive event leading to a power outage in Western Ukraine in January 2024. This finding is important for the global Energy sector relying on internet-accessible ENCO devices. “The fact that it can interact with devices remotely means it doesn't necessarily need to be deployed to a target environment,” [Magpie] Graham says. “You may potentially never see it in the environment, only its effects.” A remotely deployable capability in-the-wild combined with prevalent exposure of ENCO devices is likely to increases the risk profile of horizontal escalations in the event of cyber-misfires resulting from testing, refinement, mis-attribution of infrastructure, or misguided cyber attacks.