CrashOverride/Industroyer Malware Security Notification

This document is a security notification from Schneider Electric warning customers about the CrashOverride/Industroyer malware, an ICS-targeted attack platform used in the 2016 Ukraine cyberattack. It details the malware's capabilities, including disrupting electrical substations via protocols like IEC870-5-101/104, IEC61850, and OPC DA, and provides mitigation steps referencing US-CERT guidance.