“This alert makes it even more imperative for industrial operators to focus on .their cyber -resiliency measures. Real-time monitoring of ICS systems for anomalous behaviour that provides early warning of activities indicating the presence of an advanced attack is vital to understanding what is happening, the impact and how to mitigate the threat.  Such activity could include unusual network connections, unusual communication messages, new or unusual commands from new sources, or new network flows. Furthermore, the presence of known indicators of compromise should be immediately identified by ICS monitoring solutions, giving operators a clear warning to take action on malware in their systems.”

Read More