{"id":25582,"date":"2016-06-02T14:37:04","date_gmt":"2016-06-02T14:37:04","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/"},"modified":"2026-08-08T18:31:49","modified_gmt":"2026-08-08T18:31:49","slug":"researchers-find-odd-malware-targeting-industrial-controls","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/","title":{"rendered":"Researchers find odd malware targeting industrial controls"},"content":{"rendered":"\n

Researchers at FireEye have discovered a new variant of malware designed to attack industrial control systems (ICS) that manage the workings of critical infrastructure but aren’t sure exactly what they’ve found. On June 2, the team released a breakdown of the malware \u2014\u00a0which they dubbed IRONGATE \u2014\u00a0in an effort to raise awareness in the cybersecurity community and get feedback on where it might have come from and what exactly its purpose is.<\/p>\n\n\n\n

While researching malicious code targeting systems written in Python, researchers with the FireEye Labs Advanced Reverse Engineering (FLARE) team discovered two malware samples that included a suspicious extension labeled SCADA.exe, seemingly in reference to supervisory control and data acquisition (SCADA) systems used in ICS.<\/p>\n\n\n\n

Research Paper:\u00a0<\/strong>IRONGATE ICS Malware\u00a0\u2014 Nothing to See Here … Masking Malicious Activity on SCADA Systems<\/a><\/p>\n\n\n\n

The malware doesn’t seem to be propogating in the wild and the initial target \u2014\u00a0Siemens, which builds industrial control systems, among other things \u2014\u00a0“confirmed that IRONGATE is not viable against operational Siemens controls systems” and doesn’t exploit any vulnerabilities in the company’s control systems, according to the June 2 report.<\/p>\n\n\n\n\n\n

Further, the malware was created to run in a specific simulated environment, leading FireEye researchers to conclude it is likely a “test case, proof of concept or research activity for ICS attack techniques.”<\/p>\n\n\n\n

What is concerning, however, is the package’s similarity to Stuxnet \u2014\u00a0the most advanced malware to date designed to target critical infrastructure \u2014\u00a0and the evasive techniques IRONGATE uses to keep itself hidden.<\/p>\n\n\n\n

“From a sophistication point of view, this is definitely not at all on the level of Stuxnet,” said Rob Caldwell, ICS manager at FireEye. “But it uses some new techniques and methods and that’s what’s really interesting to us in the control systems community.”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Graphic breaks down how IRONGATE attacks and how it evades detection.<\/span><\/p>\n\n\n\n

Photo Credit: FireEye<\/span><\/p>\n\n\n\n

Specifically, IRONGATE uses three methods that, while not new in the cybersecurity sector, have never been associated with malware targeting critical infrastructure systems.<\/p>\n\n\n\n

The first is sandbox evasion, a technique by which malicious actors can avoid detection. When the malware drops on a system, it first checks to see if the network has a sandbox \u2014\u00a0a cordoned-off part of the network where potentially malicious code can be opened and analyzed without affecting the rest of the system. If one is detected, the code doesn’t run.<\/p>\n\n\n\n

“From an obfuscation point of view, that’s a pretty simple technique and easily worked around by a lot of the technology that’s out there,” Caldwell said. “But it’s something we’ve never seen control system malware do before.”<\/p>\n\n\n\n

The second interesting feature of the malware is another masking technique. As the code begins to run, it analyzes and records typical traffic patterns then runs it on a loop, similar to how a burglar might trick a video surveillance system.<\/p>\n\n\n\n

The third feature of IRONGATE is another standard of modern malware: the man-in-the-middle attack.<\/p>\n\n\n\n

At its core, IRONGATE is designed to intercept a specific input from the users and instead inject one of two values in its place. Doing so could cause a system to malfunction or return incorrect or confusing values.<\/p>\n\n\n\n\n\n

This tactic is similar to how Stuxnet operates, though the IRONGATE code only returns one of two hardcoded values, rather than manipulating the data in a dynamic way.<\/p>\n\n\n\n

This feature, along with the direct reference to SCADA in the executable file and the fact that it’s only designed to run in a simulated environment, led FireEye researchers to believe this is likely a proof of concept for how to attack ICS.<\/p>\n\n\n\n

But that doesn’t mean the discovery isn’t significant and possibly even useful.<\/p>\n\n\n\n

Caldwell noted there are only three other known malware packages that target ICS: Stuxnet, Havex and BlackEnergy. While IRONGATE has yet to be seen in the wild, having a fourth sample of ICS malware could help improve research in this area.<\/p>\n\n\n\n

“If you look at the control system malware space, there’s three samples to date \u2014\u00a0now four \u2014\u00a0so it’s a very, very small sample size,” Caldwell said. “We’re trying to get this information out to the rest of the community to help us build this story. We don’t have all the pieces to it \u2014\u00a0as far as attribution, as far as what actually executes and drops this malware \u2014\u00a0and that’s what we want to talk about with the rest of the community.”<\/p>\n\n\n\n

“Someone \u2014\u00a0whoever they are \u2014\u00a0has proven the concept,” said Stephen Ward, FireEye’s director of communications for global government and government affairs. “Someone is thinking about this type of activity where you can mask what you’re doing while at the same time conducting malicious activity \u2026 We have to takeaway that if it’s the good guys thinking about it, the bad guys definitely have as well; if it’s bad guys thinking about it, then that’s definitely bad.”<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"

IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.<\/p>\n","protected":false},"author":7,"featured_media":26602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10,16],"tags":[],"coauthors":[2464],"class_list":["post-25582","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-it-networks"],"acf":{"subheadline":"","legacy_arc_id":"XSCELAPLTZEVNEQB62D5PEVUAI","arc_canonical_url":"\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\nResearchers find odd malware targeting industrial controls - C4ISRNet<\/title>\n<meta name=\"description\" content=\"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Researchers find odd malware targeting industrial controls\" \/>\n<meta property=\"og:description\" content=\"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2016-06-02T14:37:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:31:49+00:00\" \/>\n<meta name=\"author\" content=\"Aaron Boyd\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aaron Boyd\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t \"@context\": \"https:\\\/\\\/schema.org\",\n\t \"@graph\": [\n\t {\n\t \"@type\": \"Article\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#article\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/\"\n\t },\n\t \"author\": {\n\t \"name\": \"migration\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t },\n\t \"headline\": \"Researchers find odd malware targeting industrial controls\",\n\t \"datePublished\": \"2016-06-02T14:37:04+00:00\",\n\t \"dateModified\": \"2026-08-08T18:31:49+00:00\",\n\t \"mainEntityOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/\"\n\t },\n\t \"wordCount\": 830,\n\t \"commentCount\": 0,\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg\",\n\t \"articleSection\": [\n\t \"Cyber\",\n\t \"IT and Networks\"\n\t ],\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"CommentAction\",\n\t \"name\": \"Comment\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#respond\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebPage\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/\",\n\t \"name\": \"Researchers find odd malware targeting industrial controls - C4ISRNet\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t },\n\t \"primaryImageOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#primaryimage\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg\",\n\t \"datePublished\": \"2016-06-02T14:37:04+00:00\",\n\t \"dateModified\": \"2026-08-08T18:31:49+00:00\",\n\t \"description\": \"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.\",\n\t \"breadcrumb\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#breadcrumb\"\n\t },\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"ReadAction\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#primaryimage\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg\"\n\t },\n\t {\n\t \"@type\": \"BreadcrumbList\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2016\\\/06\\\/02\\\/researchers-find-odd-malware-targeting-industrial-controls\\\/#breadcrumb\",\n\t \"itemListElement\": [\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 1,\n\t \"name\": \"Home\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"ad_zone\": \"home\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 2,\n\t \"name\": \"Cyber\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t \"ad_zone\": \"cyber\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 3,\n\t \"name\": \"Researchers find odd malware targeting industrial controls\"\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebSite\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"name\": \"C4ISRNet\",\n\t \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t },\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"SearchAction\",\n\t \"target\": {\n\t \"@type\": \"EntryPoint\",\n\t \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t },\n\t \"query-input\": {\n\t \"@type\": \"PropertyValueSpecification\",\n\t \"valueRequired\": true,\n\t \"valueName\": \"search_term_string\"\n\t }\n\t }\n\t ],\n\t \"inLanguage\": \"en-US\"\n\t },\n\t {\n\t \"@type\": \"Organization\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t \"name\": \"C4ISRNet\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"logo\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t \"caption\": \"C4ISRNet\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t }\n\t },\n\t {\n\t \"@type\": \"Person\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t \"name\": \"migration\",\n\t \"image\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"caption\": \"migration\"\n\t },\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t }\n\t ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Researchers find odd malware targeting industrial controls - C4ISRNet","description":"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Researchers find odd malware targeting industrial controls","og_description":"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/","og_site_name":"C4ISRNet","article_published_time":"2016-06-02T14:37:04+00:00","article_modified_time":"2026-08-08T18:31:49+00:00","author":"Aaron Boyd","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aaron Boyd","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Researchers find odd malware targeting industrial controls","datePublished":"2016-06-02T14:37:04+00:00","dateModified":"2026-08-08T18:31:49+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/"},"wordCount":830,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg","articleSection":["Cyber","IT and Networks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/","name":"Researchers find odd malware targeting industrial controls - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg","datePublished":"2016-06-02T14:37:04+00:00","dateModified":"2026-08-08T18:31:49+00:00","description":"IRONGATE is only the fourth malware known to target critical infrastructure control systems but the samples discovered seem to be no more than a proof of concept.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2016\/06\/02\/researchers-find-odd-malware-targeting-industrial-controls\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"Researchers find odd malware targeting industrial controls"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/636004561658783772-nist-industrial-control-security-testbedjpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/25582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=25582"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/25582\/revisions"}],"predecessor-version":[{"id":25598,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/25582\/revisions\/25598"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=25582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=25582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=25582"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=25582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}