New Stuxnet-Like Industrial Control System Malware Ups The Ante

FireEye discovered proof-of-concept malware called IRONGATE on VirusTotal that targets industrial control system software—demonstrating sandbox evasion, targeted process/library replacement, MITM against a Siemens Step 7 PLCSIM environment, and replaying of normal PLC traffic; while not currently capable of infecting real PLCs, the samples indicate increasing attacker sophistication and a potential future risk to critical infrastructure.