Triton/Trisis Safety System Attack

At a petrochemical facility, attackers infiltrated the plant’s industrial control system and safety instrumented system (SIS)—the very system designed to prevent explosions and protect workers. The malware (known as Triton/Trisis) attempted to disable these safety controls, which would have allowed unsafe operating conditions to continue without automatic shutdown. During the incident, abnormal behavior in the system triggered an unexpected shutdown. Investigations later confirmed that the attackers were actively trying to override critical safety protections. If the attack had succeeded fully, it could have led to a catastrophic explosion, placing workers at immediate risk of serious injury or death. Source: […]