SCADAverkot

SCADAverkot is a Dutch-language term used in cybersecurity discourse to describe malicious software, campaigns, or techniques aimed at Supervisory Control and Data Acquisition (SCADA) systems and related industrial control systems (ICS). The term is used to discuss risks to critical infrastructure posed by attackers seeking to disrupt, manipulate, or gain unauthorized access to operational technology networks.

SCADA systems control industrial processes in utilities, manufacturing, and transportation. They typically include field devices such as programmable logic controllers (PLCs) and remote terminal units, communications networks, and control servers such as human-machine interfaces (HMIs) and historians. SCADAverkot may target any of these components, exploit remote access, supply-chain compromises, or leverage legitimate credentials to move laterally within networks.

Threat landscape includes malware, backdoors, ransomware, and wipers designed for OT environments. Attackers may use phishing, drive-by downloads, or supply-chain compromises to gain footholds, then exploit legacy protocols such as Modbus, DNP3, or IEC 60870-5-104. Operations may focus on data manipulation to alter processes, or on service disruption through outages and equipment damage. Attacks often aim for persistence and evasion within segmented or minimally monitored OT networks.

Notable incidents illustrate the risk to SCADA and ICS: Stuxnet (2010) targeted Iranian centrifuges via PLCs; Dragonfly/Energetic Bear (2011–2014) targeted energy infrastructure; Industroyer/ CrashOverride (2016–2017) disrupted Ukraine’s power grid. NotPetya in 2017 also highlighted how OT networks can be affected through supply chains and IT-OT coexistence issues.

Defensive measures include defense-in-depth, IT-OT network segmentation, strict access controls, regular patch management, monitoring of OT protocols, anomaly detection, incident response planning, and adherence to standards such as IEC 62443, NERC CIP, and ISO 27001. See also SCADA and Industrial control system security.