FrostyGoop industrial cyberattack interrupts district heating for hundreds of buildings in Lviv

During January 22-23, 2024, attackers used industrial-control-system access and malware subsequently identified as FrostyGoop against the Lvivteploenergo district heating infrastructure in Ukraine. Manipulation of industrial control communications disrupted heating operations, causing loss of central heating and hot water to more than 600 buildings or households as described in the available reporting. Remediation took approximately two days during freezing winter temperatures. The attack represents a direct cyber-physical interruption of essential utility service delivery.