Electrum and Kamicite destructive OT/ICS campaign
Campaign
Summary
Hide ▲
Show ▼
A 2025 destructive campaign tied to Electrum and Kamicite combined persistent scanning with attacks that could disrupt industrial and communications infrastructure. The operation reached Ukrainian ISPs and industrial devices in the US, showing a broader scope than a single incident. The mix of access development and follow-on destructive activity makes the campaign operationally significant.
Related Happenings
Iranian hackers' ATG cyberattack campaign
Campaign
H score37
First: 18.05.2026 18:41
Last: 18.05.2026 18:41
Sources 1
About this happening:
Iranian threat groups launched a barrage of cyberattacks after the conflict began, broadening pressure on US gas-station fuel-monitoring systems and signaling continued ri...
Iranian hackers' ATG cyberattack campaign
CampaignAbout this happening: Iranian threat groups launched a barrage of cyberattacks after the conflict began, broadening pressure on US gas-station fuel-monitoring systems and signaling continued ri...
US government warning on Iran-affiliated critical infrastructure disruption risk
Public Sector Action
H score24
First: 18.05.2026 18:41
Last: 18.05.2026 18:41
Sources 1
About this happening:
The US government warned that Iran-affiliated threat actors were disrupting US critical infrastructure through attacks on Internet-exposed OT devices across mult...
US government warning on Iran-affiliated critical infrastructure disruption risk
Public Sector ActionAbout this happening: The US government warned that Iran-affiliated threat actors were disrupting US critical infrastructure through attacks on Internet-exposed OT devices across mult...
Municipal water and drainage utility provider in Mexico hit by network compromise
Incident
H score29
First: 07.05.2026 17:00
Last: 07.05.2026 17:00
Sources 1
About this happening:
A municipal water and drainage utility provider in Mexico suffered a significant IT compromise that escalated into an attempted attack against OT infrastructure, raisi...
Municipal water and drainage utility provider in Mexico hit by network compromise
IncidentAbout this happening: A municipal water and drainage utility provider in Mexico suffered a significant IT compromise that escalated into an attempted attack against OT infrastructure, raisi...
Handala post-ceasefire retaliatory cyberattack campaign targeting the U.S. and Israel
Campaign
H score29
First: 09.04.2026 04:22
Last: 09.04.2026 04:22
Sources 1
About this happening:
Handala and other pro-Iranian hackers are keeping a retaliatory cyber campaign active after the ceasefire announcement, leaving U.S. and Israeli targets at ong...
Handala post-ceasefire retaliatory cyberattack campaign targeting the U.S. and Israel
CampaignAbout this happening: Handala and other pro-Iranian hackers are keeping a retaliatory cyber campaign active after the ceasefire announcement, leaving U.S. and Israeli targets at ong...
Iranian-affiliated US CNI OT attack campaign
Campaign
H score33
First: 08.04.2026 11:15
Last: 08.04.2026 11:15
Sources 1
About this happening:
An Iranian-affiliated campaign is actively targeting US critical national infrastructure providers, creating operational disruption and financial loss across multi...
Iranian-affiliated US CNI OT attack campaign
CampaignAbout this happening: An Iranian-affiliated campaign is actively targeting US critical national infrastructure providers, creating operational disruption and financial loss across multi...
Timeline
-
17.02.2026 23:31 2 articles · 4mo ago
Electrum and Kamicite destructive OT/ICS campaign
Initial DisclosureSince late 2024, Kamicite has developed access and persistence against European ICS/OT supply-chain organizations, setting up later Electrum destructive follow-on activity in 2025.
Show sources
- Poland Energy Survives Attack on Wind, Solar Infrastructure — www.darkreading.com — 17.02.2026 23:31
- Poland Energy Survives Attack on Wind, Solar Infrastructure — www.darkreading.com — 17.02.2026 23:31