Virun Infection in turbo Control System at US Electric Utility

In early October 2012 a power company contacte ICS-CERT to report a virus infection in a turbine control system which impacted approximately ten computers on its control system network. 10 plant PCs were infected by Mariposa malware variant, transmitted through a USB stick. Occurred during scheduled shutdown for maintenance.

Estimated Cost

Delayed turbine restart (thus power generation) by 3 weeks

Threat Source

Impacts

OT IT