---
title: "Whitepaper - PIPEDREAM: CHERNOVITE's Emerging Malware Targeting Industrial Environments | Dragos"
description: PIPEDREAM is the sixth known ICS-specific malware. It is developed by the Activity Group (AG) Dragos has designated as CHERNOVITE. PIPEDREAM malware can disrupt, degrade, and potentially destroy industrial environments and physical processes depending on how it is leveraged in CHERNOVITE’s operations.
image: https://hub.dragos.com/hubfs/Pipedream-Chernovite-Socials2-LinkedIn-1200x628.png
---

[![lineup](https://hub.dragos.com/hs-fs/hubfs/raw_assets/public/Dragos_June2021/images/Logo-2.png?width=1996&height=115&name=Logo-2.png "lineup")](https://www.dragos.com/?hsLang=en)

- [Dragos Platform](https://www.dragos.com/cybersecurity-platform/)
- [Services](https://www.dragos.com/services)
- [Resources](https://www.dragos.com/resources)
- [Company](https://www.dragos.com/about)

- [Dragos Platform](https://www.dragos.com/cybersecurity-platform/)
- [Services](https://www.dragos.com/services)
- [Resources](https://www.dragos.com/resources)
- [Company](https://www.dragos.com/about)

- [Blog](https://hub.dragos.com/blog)

[Request a Demo](https://www.dragos.com/request-a-demo?hsLang=en)

##### FREE WHITEPAPER

# PIPEDREAM: CHERNOVITE's Emerging Malware Targeting Industrial Control Systems

Read our complete analysis on CHERNOVITE and the PIPEDREAM malware, and get actionable guidance on what you can do to mitigate risk from cyber attack.

PIPEDREAM is the seventh known ICS-specific malware. The CHERNOVITE Activity Group (AG) developed PIPEDREAM. PIPEDREAM is a modular ICS attack framework that an adversary could leverage to cause disruption, degradation, and possibly even destruction depending on targets and the environment.

Dragos assesses with high confidence that PIPEDREAM has not yet been employed in the wild for destructive effects. This is a rare case of accessing and analyzing malicious capabilities developed by adversaries before their deployment and gives defenders a unique opportunity to prepare in advance.

PIPEDREAM can manipulate a wide variety of programmable logic controllers (PLC) and industrial software, including Omron and Schneider Electric controllers. It can also execute attacks against the ubiquitous industrial technologies CODESYS, Modbus, and OPC UA. Together, a significant percentage of industrial assets worldwide are vulnerable to PIPEDREAM.

 

COPYRIGHT © 2026 DRAGOS, INC., ALL RIGHTS RESERVED.  
For information about how we collect, use, share or otherwise process information about you, please see our [privacy policy](https://www.dragos.com/privacy/?hsLang=en). and [Terms of Service](https://www.dragos.com/terms/?hsLang=en) for more information.

![](https://urldefense.com/v3/__https://s.ml-attr.com/getuid?https*3a*2f*2fattr.ml-api.io*2f*3fdomain*3ddragos.com*26pId*3d*24UID__;JSUlJSUlJSUl!!ObtO0C2TD-k!Vfd64U6OpsMuW83nQ96X9YyxWiTq6RmXYsH_63ZnjCJK00aDGxSTUBPUyTamgAOc$)