Industroyer
Aliases: CRASHOVERRIDE
- Family
- Malware family
- Operating systems
- windows
- Last IoC activity
- 2026-07-15 16:45:04
- Profile updated
- 2026-07-07 11:27:56
Context
Industroyer is a sophisticated piece of malware designed to cause an Impact to the working processes of Industrial Control Systems (ICS), specifically ICSs used in electrical substations. Industroyer was alleged to be used in the attacks on the Ukrainian power grid in December 2016.)
Detection coverage
- 1 YARA rules
Used by threat actors
- 2016 Ukraine Electric Power Attack (campaign)
Detection rules
- MALPEDIA_Win_Industroyer_Auto (yara-rule)