pipedream-chernovite-emerging-malware-targeting-ics.pdf

### PIPEDREAM (CHERNOVITE) — Executive summary Dragos details PIPEDREAM, a sophisticated ICS-targeting malware toolkit developed by the CHERNOVITE activity group that can discover, access, manipulate, and potentially disrupt or destroy industrial control systems (notably Omron and Schneider/CODESYS PLCs and OPC UA servers); the paper maps capabilities to MITRE ATT&CK for ICS, describes attack scenarios across IT/OT layers, and provides detection and mitigation guidance while noting the toolkit has not been observed in active destructive use.