Malware
TRITON
First seen: 2017-08 • Status: active
Currently Active Threat
TRITON is terrifying malware designed to disable safety systems in factories. It could cause explosions or chemical releases.
Overview
TRITON targets safety instrumented systems (SIS) that prevent industrial disasters. It was designed to cause physical damage and potentially loss of life.
Also Known As
Trisis, HatMan
How It Spreads
- • Targeted attacks on industrial facilities
What It Does
- • Targets Triconex safety controllers
- • Disables safety systems
- • Could cause physical damage
Is your business exposed?
Target Platforms
Triconex Safety Controllers
Detection Tips
- • Monitor SIS communications
- • Watch for unauthorized controller access
MITRE ATT&CK Techniques
T0816, T0855
If You're Infected
- 1.
Isolate SIS systems immediately
- 2.
Engage industrial security experts
Related Malware
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required