Fuxnet
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| ICS | T0806 | Brute Force I/O |
Fuxnet repeatedly wrote arbitrary data over the Meter-Bus channel from impacted devices to connected sensors to render sensor data acquisition useless.[1] |
|
| ICS | T0809 | Data Destruction |
Fuxnet physically destroyed NAND memory chips on impacted devices through repeated bit-flip operations.[1] |
|
| ICS | T0814 | Denial of Service |
Fuxnet shut down remote access services such as SSH, HTTP, telnet, and SNMP to a device along with deleting the routing table for routing devices to inhibit system accessibility and communication.[1] |
|
| ICS | T0822 | External Remote Services |
Fuxnet initial execution relied on accessing external remote services for victim environments.[1] |
|
| ICS | T0883 | Internet Accessible Device |
Fuxnet execution relied upon accessing Internet-accessible devices for initial access and deployment.[1] |
|
| ICS | T0829 | Loss of View |
Fuxnet impaired sensor communication to impacted devices resulting in a loss of view condition for overall system monitoring.[1] |
|