Virun Infection in turbo Control System at US Electric Utility

February 27, 2024


In early October 2012 a power company contacte ICS-CERT to report a virus infection in a turbine control system which impacted approximately ten computers on its control system network. 10 plant PCs were infected by Mariposa malware variant, transmitted through a USB stick. Occurred during scheduled shutdown for maintenance.

Incident Date

October 1, 2012

Estimated Cost

Delayed turbine restart (thus power generation) by 3 weeks


Type of Malware

No Malware identified

Threat Source

No threat source identified