Incident
France's critical infrastructure compromise
incident:france_s_critical_infrastructure_compromise
Also: French critical infrastructure botnet infection
Compromise involving French power, rail, hospital, banking, and water-treatment infrastructure beaconing to malware command-and-control domains.
Explore relationships
Mentioned in
EP 94
Explicit
100%
Compromise involving French power, rail, hospital, banking, and water-treatment infrastructure beaconing to malware command-and-control domains.
“It was France’s power grid, like a bunch of nuclear power stations.”
Chris Davis ·
offsets 35345–35412
“it was also France’s rail system, hospitals, banks, water treatment systems”
Chris Davis ·
offsets 35518–35593
Relationships
Claims
France's critical infrastructure compromise
TARGETS
France
The incident targeted or affected French critical infrastructure, including the power grid, rail system, hospitals, banks, and water treatment systems.
Explicit
Confidence 99%
· Chris Davis
EP 94
Details
“It was France’s power grid, like a bunch of nuclear power stations.”
Chris Davis ·
offsets 35345–35412
France's critical infrastructure compromise
INVOLVES
Command and control
The French critical-infrastructure compromise involved systems repeatedly beaconing to command-and-control domains.
Explicit
Confidence 94%
· Chris Davis
EP 94
Details
“we noticed that it was also France’s rail system, hospitals, banks, water treatment systems.”
Chris Davis ·
offsets 35502–35594
France's critical infrastructure compromise
ATTRIBUTED_TO
Kasbah Hacker
Chris's investigation traced the suspected attacker to Morocco and he called the actor the Kasbah Hacker; the identification is presented as an investigative conclusion rather than an adjudicated fact.
Uncertain
Confidence 82%
· Jack Rhysider
EP 94
Details
“Because the attacker was in Morocco, Chris called him the Kasbah Hacker”
Jack Rhysider ·
offsets 38385–38456