Industrial Control Vendors Identified In Dragonfly Attack

Symantec, F-Secure and DHS/ICS-CERT reported a targeted campaign dubbed Dragonfly/Havex that compromised industrial control system software vendor websites to distribute a RAT/downloader (Havex) and additional payloads (e.g., Karagany), targeting energy-sector organizations across multiple countries; vendors eWon and MB Connect Line were named as compromised, with evidence of watering-hole and supply-chain tactics, credential theft risk, and mitigation steps taken by affected vendors.