Intrusion PreventionTriton.Malware.Backdoor
Description
This indicates that a system might be infected by Triton malware.
Triton is a malware that targets Triconex Safety Instrumented System controllers.
Affected Products
Any unprotected Triconex system is vulnerable.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Monitor the traffic from that network for any suspicious activity.
Use Anti-Virus software to scan and clean the system.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 49234 |
| Created | Jun 03, 2020 |
| Updated | Jun 27, 2022 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Other |
| Affected App | SCADA |