COSMICENERGY: New OT Malware Possibly Related To Russian Emergency Response Exercises

Mandiant has identified a new malware, tracked as COSMICENERGY, that is designed to disrupt power systems. This malware, submitted by a user in Russia in December 2021, poses a threat to electric grid assets, especially in Europe, the Middle East, and Asia. It interacts with devices commonly used in electricity transmission and distribution, signalling a trend in more accessible development of offensive operational technology capabilities.