OT-ENERGY-IEC104Impact

IEC-104 Substation Control

Industroyer-class control of substation RTUs over IEC 60870-5-104 — open breakers, switch ground, denial of service to grid sections.

§ Where this technique fits

OT-ENERGY-IEC104 is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

§ Dossiers chaining this technique

Industroyer2 IEC-104 substation hijack
Timed payload speaks IEC-60870-5-104 to substation RTUs at attacker-chosen hour; sends 'open breaker' commands across a substation, blackouts a grid section.
step 5 / 6

§ What commonly comes next

01
Data Destruction
T1485 · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Industroyer2 IEC-104 substation hijack

§ What commonly comes next