Analyzing PIPEDREAM: Results from Runtime Testing

PIPEDREAM (attributed to CHERNOVITE) is a cross-industry ICS malware framework that Dragos tested in runtime and found capable of disruptive and destructive effects: MOUSEHOLE can manipulate OPC UA-controlled processes, EVILSCHOLAR can perform CODESYSv3 logic corruption on PLCs, and BADOMEN can modify Omron NX/NJ controllers and 1S-series servo drives; safety controller targeting is not yet supported but is a likely future development. The report confirms high technical capability, demonstrates physical-impact scenarios (overpressurizing pipelines, overspeeding servos), and reiterates previously published mitigation guidance.