Category Dashboard

📁 ICS ATT&CK — category dashboard

804 indicators · avg threat 0.5 · intensity 47 (ELEVATED)

Indicators

804
0 high-severity

Top ASNs

0
hosting this category

Parent orgs

0
grouped ownership

Countries

0
geo footprint

🌐 Top ASNs

No data.

🏢 Top Parent Orgs

No data.

🌎 Countries

No data.

🦠 Malware families

No data.

🔥 Top indicators (804 total, 200 shown)

⇩ Export
IndicatorTypeThreatSightingsASNCountryLast seen
https://attack.mitre.org/mitigations/M0809 url 1 2026-08-06 13:09:23
https://www.wsj.com/articles/iranian-hackers-infiltrated-new-york-dam-in-2013-1450662559 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0760 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0928 url 1 2026-08-06 13:09:23
https://time.com/4270728/iran-cyber-attack-dam-fbi/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0746 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0934 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0857 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0915 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0941 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0849 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0775 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0807 url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1009 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0843 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0908 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0937) url 1 2026-08-06 13:09:23
https://ics-cert.us-cert.gov/sites/default/files/documents/MAR-17-352-01%20HatMan%20-%20Safety%20System%20Targeted%20Malware%20%28Update%20B%29.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0821) url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0757 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0817 url 1 2026-08-06 13:09:23
https://dragos.com/blog/trisis/TRISIS-01.pdf url 3 2026-08-06 14:45:34
https://attack.mitre.org/techniques/T0889) url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0910 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0953 url 1 2026-08-06 13:09:23
https://www.midnightbluelabs.com/blog/2018/1/16/analyzing-the-triton-industrial-malware url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0847 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0796 url 1 2026-08-06 13:09:23
https://us-cert.cisa.gov/sites/default/files/recommended_practices/final-RP_ics_cybersecurity_incident_response_100609.pdf url 1 2026-08-06 13:09:23
https://www.youtube.com/watch?v=XwSJ8hloGvY url 1 2026-08-06 13:09:23
https://www.bbc.com/news/technology-36158606 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0774 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0810 url 1 2026-08-06 13:09:23
https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2017-347-01+Triconex+V3.pdf&p_Doc_Ref=SEVD-2017-347-01 url 1 2026-08-06 13:09:23
https://www.reuters.com/article/us-nuclearpower-cyber-germany/german-nuclear-plant-infected-with-computer-viruses-operator-says-idUSKCN0XN2OS url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0733 url 1 2026-08-06 13:09:23
https://www.darpa.mil/program/rapid-attack-detection-isolation-and-characterization-systems url 1 2026-08-06 13:09:23
https://www.youtube.com/watch?v=f09E75bWvkk&index=3&list=PL8OWO1qWXF4qYG19p7An4Vw3N2YZ86aRS&t=0s url 1 2026-08-06 13:09:23
https://www.darkreading.com/endpoint/german-nuclear-power-plant-infected-with-malware/d/d-id/1325298 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0794 url 1 2026-08-06 13:09:23
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf url 1 2026-08-06 13:09:23
https://collaborate.mitre.org/attackics/index.php/Software/S0004 url 1 2026-08-06 13:09:23
https://www.welivesecurity.com/2016/04/28/malware-found-german-nuclear-power-plant/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0729 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0947 url 1 2026-08-06 13:09:23
https://collaborate.mitre.org/attackics/index.php/Software/S0004) url 1 2026-08-06 13:09:23
https://www.kkw-gundremmingen.de/presse.php?id=571 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0798 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0802 url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1157) url 1 2026-08-06 13:09:23
https://web.archive.org/web/20160430041256/https://www.geek.com/apps/german-nuclear-plant-found-riddled-with-conficker-other-viruses-1653415/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0790 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0942 url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1157 url 1 2026-08-06 13:09:23
https://www.sciencealert.com/multiple-computer-viruses-have-been-discovered-in-this-german-nuclear-plant url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0768 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0919 url 1 2026-08-06 13:09:23
https://claroty.com/team82/research/unpacking-the-blackjack-groups-fuxnet-malware url 3 2026-08-06 14:45:33
https://arstechnica.com/information-technology/2016/04/german-nuclear-plants-fuel-rod-system-swarming-with-old-malware/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0750 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0812 url 1 2026-08-06 13:09:23
https://collaborate.mitre.org/attackics/index.php/Software/S0017 url 1 2026-08-06 13:09:23
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/malware-discovered-in-german-nuclear-power-plant url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0914 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0917 url 1 2026-08-06 13:09:23
https://www.forbes.com/sites/daveywinder/2020/06/10/honda-hacked-japanese-car-giant-confirms-cyber-attack-on-global-operations-snake-ransomware/?sh=2725c35753ad url 1 2026-08-06 13:09:23
W32.Ramnit domain 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0803 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0932 url 1 2026-08-06 13:09:23
https://blog.malwarebytes.com/threat-analysis/2020/06/honda-and-enel-impacted-by-cyber-attack-suspected-to-be-ransomware/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0846/002 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0791 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0916 url 1 2026-08-06 13:09:23
https://bacnet.org/wp-content/uploads/sites/4/2022/06/Newman_2010.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0088 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0739 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0800 url 1 2026-08-06 13:09:23
https://pylos.co/2020/01/28/getting-the-story-right-and-why-it-matters/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0852 url 1 2026-08-06 13:09:23
user.session.start domain 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0758 url 1 2026-08-06 13:09:23
https://standards.ieee.org/standard/1686-2013.html url 1 2026-08-06 13:09:23
https://www.dragos.com/blog/industry-news/ekans-ransomware-misconceptions-and-misunderstandings/#_edn7 url 1 2026-08-06 13:09:23
app.oauth2.as.authorize domain 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0742 url 1 2026-08-06 13:09:23
https://webstore.iec.ch/publication/6912 url 1 2026-08-06 13:09:23
https://collaborate.mitre.org/attackics/index.php/Software/S0017) url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0891 url 1 2026-08-06 13:09:23
policy.mfa.bypass domain 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0902 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0918 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0859 url 1 2026-08-06 13:09:23
google.iam.credentials.generateAccessToken domain 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0800 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0811 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0890 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0762 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0922 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T1068/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0735 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0954 url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1000 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0846 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0779 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0949 url 1 2026-08-06 13:09:23
https://www.welivesecurity.com/wp-content/uploads/200x/white-papers/ESET_ACAD_Medre_A_whitepaper.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/wiki/Technique/T1018 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0755 url 1 2026-08-06 13:09:23
https://us-cert.cisa.gov/sites/default/files/recommended_practices/Recommended%20Practice%20Updating%20Antivirus%20in%20an%20Industrial%20Control%20System_S508C.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1000) url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0818 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0741 url 1 2026-08-06 13:09:23
https://attack.mitre.org/mitigations/M0806 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0884 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0911 url 1 2026-08-06 13:09:23
https://us-cert.cisa.gov/ncas/tips/ST05-003 url 1 2026-08-06 13:09:23
https://attack.mitre.org/wiki/Technique/T1090 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0905 url 1 2026-08-06 13:09:23
https://www.dhs.gov/sites/default/files/saver-msr-rf-detection_cod-508_10july2019.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0843/002 url 1 2026-08-06 13:09:23
https://attack.mitre.org/detectionstrategies/DET0724 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0869 url 1 2026-08-06 13:09:23
https://attack.mitre.org/groups/G0088)’ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0833 url 1 2026-08-06 13:09:23
https://web.archive.org/web/20190202205824/https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html url 1 2026-08-06 13:09:23
https://www.mitre.org/sites/default/files/pdf/08%201145.pdf url 1 2026-08-06 13:09:23
https://nsarchive.gwu.edu/sites/default/files/documents/3891751/SANS-and-Electricity-Information-Sharing-and.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T1692 url 1 2026-08-06 13:09:23
https://www.wired.com/story/russian-hackers-attack-ukraine/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0886 url 1 2026-08-06 13:09:23
https://www.zdnet.com/article/how-hackers-attacked-ukraines-power-grid-implications-for-industrial-iot-security/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0859).\n\nSpecific url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0042 url 1 2026-08-06 13:09:23
https://www.bloomberg.com/news/articles/2023-12-22/iranian-linked-hacks-expose-failure-to-safeguard-us-water-system url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0823) url 1 2026-08-06 13:09:23
com.apple.diskarbitration domain 1 2026-08-06 13:09:23
https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0824 url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0109 url 1 2026-08-06 13:09:23
https://www.wpxi.com/news/local/officials-investigating-cyberattack-municipal-water-authority-aliquippa/K5A3BEW35RAXJPMNHNE35RZ7WA/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1165 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0813 url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0046 url 1 2026-08-06 13:09:23
ntds.dit domain 5 2026-08-06 14:45:05
https://attack.mitre.org/software/S1045 url 1 2026-08-06 13:09:23
https://duo.com/decipher/the-dallas-county-siren-hack url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0060 url 1 2026-08-06 13:09:23
https://www.cisa.gov/uscert/ncas/alerts/aa22-103a url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0838 url 1 2026-08-06 13:09:23
ufn.vbs domain 1 2026-08-06 13:09:23
https://attack.mitre.org/groups/G1000 url 1 2026-08-06 13:09:23
https://hub.dragos.com/hubfs/116-Whitepapers/Dragos_ChernoviteWP_v2b.pdf?hsLang=en url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0878) url 1 2026-08-06 13:09:23
lun.vbs domain 1 2026-08-06 13:09:23
https://dragos.com/resource/allanite/ url 1 2026-08-06 13:09:23
https://media.defcon.org/DEF%20CON%2030/DEF%20CON%2030%20presentations/Jimmy%20Wylie%20-%20Analyzing%20PIPEDREAM%20Challenges%20in%20testing%20an%20ICS%20attack%20toolkit.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0885 url 1 2026-08-06 13:09:23
s1.txt domain 1 2026-08-06 13:09:23
https://attack.mitre.org/groups/G1000) url 1 2026-08-06 13:09:23
https://www.mandiant.com/resources/incontroller-state-sponsored-ics-tool url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0873 url 1 2026-08-06 13:09:23
https://attack.mitre.org/groups/G1000)s url 1 2026-08-06 13:09:23
https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2022-01 url 1 2026-08-06 13:09:23
https://infosys.beckhoff.com/english.php?content=../content/1033/tc3_sourcecontrol/18014398915785483.html&id= url 1 2026-08-06 13:09:23
CVE-2014-9195 cve 1 2026-08-06 13:09:23
https://attack.mitre.org/software/S1045) url 1 2026-08-06 13:09:23
http://www.plcdev.com/book/export/html/373 url 1 2026-08-06 13:09:23
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0840 url 1 2026-08-06 13:09:23
https://www.exida.com/images/uploads/18492275-Alarm-Management-for-Process-Control.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/wiki/Technique/T1049 url 1 2026-08-06 13:09:23
https://www.sans.org/reading-room/whitepapers/ICS/protect-critical-infrastructure-systems-whitelisting-35312 url 1 2026-08-06 13:09:23
https://en.wikipedia.org/wiki/Netstat url 1 2026-08-06 13:09:23
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-41r1.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0842) url 1 2026-08-06 13:09:23
https://www.natf.net/docs/natf/documents/resources/security/natf-transient-cyber-asset-guidance.pdf url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0867 url 1 2026-08-06 13:09:23
https://attack.mitre.org/datacomponents/DC0065 url 1 2026-08-06 13:09:23
https://cdn.selinc.com/assets/Literature/Publications/Application%20Notes/AN2015-08_20150817.pdf? url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T1570/ url 1 2026-08-06 13:09:23
Windows.Graphics.Capture domain 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0839 url 1 2026-08-06 13:09:23
https://msrc-blog.microsoft.com/2017/08/09/moving-beyond-emet-ii-windows-defender-exploit-guard/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0883 url 1 2026-08-06 13:09:23
https://www.us-cert.gov/sites/default/files/Monitors/ICS-CERT_Monitor_Jan-April2014.pdf url 1 2026-08-06 13:09:23
https://www.helpnetsecurity.com/2019/07/10/bacnet-devices/ url 1 2026-08-06 13:09:23
https://documents.trendmicro.com/assets/white_papers/wp-caught-in-the-act-running-a-realistic-factory-honeypot-to-capture-real-threats.pdf url 1 2026-08-06 13:09:23
https://cdn.selinc.com/assets/Literature/Publications/Technical%20Papers/6891_HowSDN_CG_20180720_Web2.pdf?v=20190312-231901 url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0822) url 1 2026-08-06 13:09:23
https://www.csiac.org/journal-article/practical-industrial-control-system-ics-cybersecurity-it-and-ot-have-converged-discover-and-defend-your-assets/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0819) url 1 2026-08-06 13:09:23
https://www.rtautomation.com/rtas-blog/still-a-thrill-opc-ua-device-discovery/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0893 url 1 2026-08-06 13:09:23
https://www.langner.com/2018/11/why-ethernet-ip-changes-the-ot-asset-discovery-game/ url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0807) url 1 2026-08-06 13:09:23
https://us-cert.cisa.gov/ncas/alerts/TA13-175A url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0853) url 1 2026-08-06 13:09:23
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/attractive-accounts-for-credential-theft url 1 2026-08-06 13:09:23
https://attack.mitre.org/techniques/T0802) url 1 2026-08-06 13:09:23
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models url 1 2026-08-06 13:09:23
Aggregates are cached (30 min; refresh) and capped, so this dashboard stays fast even when the category spans millions of indicators. Every ASN / org / country / family is a pivot to its own dashboard.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php