Deep Dive Into PIPEDREAM’s OPC UA Module, MOUSEHOLE

Dragos analyzes PIPEDREAM’s MOUSEHOLE module—an OPC UA client component developed by the CHERNOVITE group—that leverages the open-source python-opcua library to scan for OPC UA servers, brute-force authentication, read/write node attributes, and modify security settings; the report warns that poorly secured OPC UA servers could enable adversaries to directly impact industrial control systems and cause loss of control, and it highlights the broader risk posed by accessible open-source ICS protocol libraries.