Assessment of Reported Malware Infection at Nuclear Facility

Dragos investigated a malware intrusion at India’s Kudankulam Nuclear Power Plant (NPCIL) that involved DTrack RAT samples acting as payloads or droppers. The samples contained hard-coded private IPs and a username referencing KKNPP, indicating a targeted intrusion against the administrative network; researchers found no ICS-specific components or evidence of OT/control system compromise or operational impact.