Analyzing the Russian Vulkan Files Leak for Impacts to ICS/OT Operations

Dragos analyzed leaked NTC Vulkan contracts (the “Vulkan files”) that reveal Russian cyber programs designed to monitor and manipulate internet communications and to enable offensive operations against industrial control systems (ICS/OT). Dragos assesses the documents as likely legitimate with moderate confidence, notes overlap with GRU tactics and capabilities, highlights potential physical impacts in rail and petrochemical environments, and provides defensive recommendations and a public technical brief for ICS/OT operators.