Electrum and Kamicite destructive OT/ICS campaign
Campaign
Summary
Hide ▲
Show ▼
A 2025 destructive campaign tied to Electrum and Kamicite combined persistent scanning with attacks that could disrupt industrial and communications infrastructure. The operation reached Ukrainian ISPs and industrial devices in the US, showing a broader scope than a single incident. The mix of access development and follow-on destructive activity makes the campaign operationally significant.
Related Happenings
Iranian hackers' ATG cyberattack campaign
Campaign
First: 18.05.2026 18:41
Last: 18.05.2026 18:41
Sources 1
About this happening:
Iranian threat groups launched a **barrage of cyberattacks** after the conflict began, broadening pressure on **US gas-station fuel-monitoring systems** and signaling continued ri...
Iranian hackers' ATG cyberattack campaign
CampaignAbout this happening: Iranian threat groups launched a **barrage of cyberattacks** after the conflict began, broadening pressure on **US gas-station fuel-monitoring systems** and signaling continued ri...
US government warning on Iran-affiliated critical infrastructure disruption risk
Public Sector Action
First: 18.05.2026 18:41
Last: 18.05.2026 18:41
Sources 1
About this happening:
The **US government** warned that **Iran-affiliated threat actors** were disrupting **US critical infrastructure** through attacks on **Internet-exposed OT devices** across **mult...
US government warning on Iran-affiliated critical infrastructure disruption risk
Public Sector ActionAbout this happening: The **US government** warned that **Iran-affiliated threat actors** were disrupting **US critical infrastructure** through attacks on **Internet-exposed OT devices** across **mult...
Municipal water and drainage utility provider in Mexico hit by network compromise
Incident
First: 07.05.2026 17:00
Last: 07.05.2026 17:00
Sources 1
About this happening:
A **municipal water and drainage utility provider in Mexico** suffered a **significant IT compromise** that escalated into an attempted attack against **OT infrastructure**, raisi...
Municipal water and drainage utility provider in Mexico hit by network compromise
IncidentAbout this happening: A **municipal water and drainage utility provider in Mexico** suffered a **significant IT compromise** that escalated into an attempted attack against **OT infrastructure**, raisi...
Handala post-ceasefire retaliatory cyberattack campaign targeting the U.S. and Israel
Campaign
First: 09.04.2026 04:22
Last: 09.04.2026 04:22
Sources 1
About this happening:
**Handala** and other **pro-Iranian hackers** are keeping a retaliatory **cyber campaign** active after the **ceasefire announcement**, leaving **U.S. and Israeli targets** at ong...
Handala post-ceasefire retaliatory cyberattack campaign targeting the U.S. and Israel
CampaignAbout this happening: **Handala** and other **pro-Iranian hackers** are keeping a retaliatory **cyber campaign** active after the **ceasefire announcement**, leaving **U.S. and Israeli targets** at ong...
Iranian-affiliated US CNI OT attack campaign
Campaign
First: 08.04.2026 11:15
Last: 08.04.2026 11:15
Sources 1
About this happening:
An **Iranian-affiliated** campaign is actively targeting **US critical national infrastructure providers**, creating **operational disruption** and **financial loss** across multi...
Iranian-affiliated US CNI OT attack campaign
CampaignAbout this happening: An **Iranian-affiliated** campaign is actively targeting **US critical national infrastructure providers**, creating **operational disruption** and **financial loss** across multi...
Timeline
-
17.02.2026 23:31 2 articles · 3mo ago
Electrum and Kamicite destructive OT/ICS campaign
Initial DisclosureSince **late 2024**, **Kamicite** has developed access and persistence against **European ICS/OT supply-chain** organizations, setting up later **Electrum** destructive follow-on activity in **2025**.
Show sources
- Poland Energy Survives Attack on Wind, Solar Infrastructure — www.darkreading.com — 17.02.2026 23:31
- Poland Energy Survives Attack on Wind, Solar Infrastructure — www.darkreading.com — 17.02.2026 23:31