PLC-Blaster

MITRE ATT&CK: S1006 View on attack.mitre.org

Malware type
worm, exploit-kit
Family
Malware family
Profile updated
2026-07-07 15:47:19

Targeted industries: energy-and-utilities manufacturing

Context

PLC-Blaster is a piece of proof-of-concept malware that runs on Siemens S7 PLCs. This worm locates other Siemens S7 PLCs on the network and attempts to infect them. Once this worm has infected its target and attempted to infect other devices on the network, the worm can then run one of many modules.

Malware & tools used

  • Modify Controller Tasking (attack-pattern)
  • Native API (attack-pattern)
  • Program Download (attack-pattern)
  • Denial of Service (attack-pattern)
  • Manipulate I/O Image (attack-pattern)
  • Modify Program (attack-pattern)
  • Change Operating Mode (attack-pattern)
  • Port Scan (attack-pattern)

External references