Skip to content
MalwareWiki

Malware

Industroyer

aka Crash · CrashOverride

Industroyer is a malware framework considered to have been used in the cyberattack on Ukraine’s power grid on December 17, 2016.

Industroyer, also known as Crash, CrashOverride, is a Windows malware family operated by ELECTRUM.

Background

Industroyer is a malware framework believed to have powered the December 17, 2016 cyberattack against Ukraine's electrical grid. That incident left roughly a fifth of the capital, Kiev, without electricity for an hour. It stands as the first known piece of malware purpose-built to target power grids.

Source: Malpedia (Fraunhofer FKIE).