Ukraine
UKR
FrostyGoop attack on Lvivteploenergo cuts heating for almost 48 hours
Attackers compromised the Lviv municipal heating utility Lvivteploenergo and manipulated ENCO industrial controllers over Modbus. Dragos assessed with moderate confidence that FrostyGoop malware was used; the resulting OT malfunction deprived more than 600 apartment buildings of central heating for almost 48 hours during sub-zero temperatures.
87
Estimated severity
87 / 100
90
Source reliability
90 / 100
Approximate Date
22/01/2024
Targeted Company
LVIVTEPLOENERGO
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Ukraine
Affected countries
Ukraine
Impacted regions
Lviv · Ukraine
Operational Impact
Duration
2 days
Financial impact (USD M)
No information
Impact types
OT or ICS disruptionService unavailability
Affected sectors
Energy & Utilities
Affected departments
No information
Attack Profile
Attack types
ICS/OT compromiseMalware
Attributed threat actors
No information
Sources
Incident Sources
dragos.comhttps://www.dragos.com/blog/protect-against-frostygoop-ics-malware-targeting-operational-technologytherecord.mediahttps://therecord.media/frostygoop-malware-ukraine-heattechcrunch.comhttps://techcrunch.com/2024/07/23/hackers-shut-down-heating-in-ukrainian-city-with-malware-researchers-say/