---
title: "Intel Brief: Impact of FrostyGoop ICS Malware on Connected OT Systems | Dragos"
description: Get key intel about the ModBus Malware Attack, your risk, and what countermeasures you should take to protect your OT systems. Download the report  →
image: https://hub.dragos.com/hubfs/dragos-frostygoop-intel-brief-1200x628.png
---

[![Dragos\_Logo\_reversed\_TEAL-146](https://hub.dragos.com/hs-fs/hubfs/111%20Logos%20-%20Dragos/Dragos_Logo_reversed_TEAL-146.png?width=165&height=38&name=Dragos_Logo_reversed_TEAL-146.png "Dragos_Logo_reversed_TEAL-146")](https://www.dragos.com/?hsLang=en)

## INTELLIGENCE BRIEF

# Impact of FrostyGoop ICS Malware on Connected OT Systems

##### This newly detected ICS Malware could have significant impact to your OT environment.

 

##### In April 2024, FrostyGoop, an ICS malware, was discovered in a publicly available malware scanning repository. FrostyGoop can target devices communicating over Modbus TCP to manipulate control, modify parameters, and send unauthorized command messages. Modbus TCP is a commonly used protocol across all industrial sectors.

![iPad\_Dragos\_SB\_IntelCover\_FrostyGoop](https://hub.dragos.com/hs-fs/hubfs/iPad_Dragos_SB_IntelCover_FrostyGoop.png?width=200&height=245&name=iPad_Dragos_SB_IntelCover_FrostyGoop.png "iPad_Dragos_SB_IntelCover_FrostyGoop")

The Cyber Security Situation Center (CSSC), a part of the Security Service of Ukraine, shared details with Dragos about a cyber attack that impacted a municipal district energy company in Ukraine in January 2024. At the time of the attack, this facility fed over 600 apartment buildings, supplying customers with central heating. Remediation of the incident took almost two days, during which time the civilian population had to endure sub-zero temperatures. Dragos assessed that FrostyGoop and internet-exposed ICS devices facilitated this attack. 

This brief provides a strategic summary of information on this OT threat and attack as reported in Dragos WorldView threat intelligence, with clear guidance for OT asset owners and operators. 

#### GET YOUR INTELLIGENCE REPORT

[![SKIP](https://no-cache.hubspot.com/cta/default/5943619/9c580340-f10e-4aa0-8aa2-300b1d2a6d62.png)](https://cta-redirect.hubspot.com/cta/redirect/5943619/9c580340-f10e-4aa0-8aa2-300b1d2a6d62)

# Explore our Resources

Explore more OT Cybersecurity resources so that you can better protect your environment from OT threats.

[![dragos-frostygoop-webinar-register-1200x628](https://hub.dragos.com/hs-fs/hubfs/dragos-frostygoop-webinar-register-1200x628.png?width=1200&height=628&name=dragos-frostygoop-webinar-register-1200x628.png)](https://hub.dragos.com/webinar/frostygoop-modbus-malware-attacks-on-ot?hsLang=en)

AUG. 6 WEBINAR

##### [Cold Reality: The Impact of Modbus Malware on Connected OT Systems](https://hub.dragos.com/webinar/frostygoop-modbus-malware-attacks-on-ot?hsLang=en)

[![Dragos\_Intel\_Brief\_VOLTZITE\_Feb24\_Socials\_LinkedIn\_1200x628\_Final](https://hub.dragos.com/hs-fs/hubfs/Dragos_Intel_Brief_VOLTZITE_Feb24_Socials_LinkedIn_1200x628_Final.png?width=1200&height=628&name=Dragos_Intel_Brief_VOLTZITE_Feb24_Socials_LinkedIn_1200x628_Final.png)](https://hub.dragos.com/report/voltzite-espionage-operations-targeting-us-ot-systems?hsLang=en)

INTELLIGENCE BRIEF

##### [VOLTZITE Espionage Operations Targeting US Critical Systems](https://hub.dragos.com/report/voltzite-espionage-operations-targeting-us-ot-systems?hsLang=en)

[![Dragos\_OD\_HacktivistCompromiseUSWaterUtilities\_Webinar\_Dec23\_Socials\_LinkedIn\_1200x628\_Final](https://hub.dragos.com/hs-fs/hubfs/Dragos_OD_HacktivistCompromiseUSWaterUtilities_Webinar_Dec23_Socials_LinkedIn_1200x628_Final.png?width=1200&height=628&name=Dragos_OD_HacktivistCompromiseUSWaterUtilities_Webinar_Dec23_Socials_LinkedIn_1200x628_Final.png)](https://hub.dragos.com/on-demand/hacktivist-intrusions-against-israeli-made-ot?hsLang=en)

ON-DEMAND WEBINAR

##### [Crossing the Rubicon: Hacktivist Intrusions Against Israeli-Made OT](https://hub.dragos.com/on-demand/hacktivist-intrusions-against-israeli-made-ot?hsLang=en)

## Accelerate your digital transformation - securely.

 

[Contact Us](https://www.dragos.com/contact/?https://www.dragos.com/cybersecurity-platform/?utm_campaign=Brand+%7C+Q22022&utm_medium=ppc&utm_source=adwords&utm_content=&utm_ad_id=&utm_campaign_id=&_gl=1*1u5bztd*_ga*MTQyNDM5MTQxMS4xNjgzMDM0NTMx*_ga_8Z0JSJN44D*MTcwODcxNzc4Ny4yMi4xLjE3MDg3MTg0ODkuMzEuMC4w*_ga_7C51GTM128*MTcwODcxNzc4Ny4xOC4xLjE3MDg3MTg0ODkuMC4wLjA&hsLang=en)

COPYRIGHT © 2026 DRAGOS, INC., ALL RIGHTS RESERVED.  
For information about how we collect, use, share or otherwise process information about you, please see our [privacy policy](https://www.dragos.com/privacy/?hsLang=en). and [Terms of Service](https://www.dragos.com/terms/?hsLang=en) for more information.

![](https://urldefense.com/v3/__https://s.ml-attr.com/getuid?https*3a*2f*2fattr.ml-api.io*2f*3fdomain*3ddragos.com*26pId*3d*24UID__;JSUlJSUlJSUl!!ObtO0C2TD-k!Vfd64U6OpsMuW83nQ96X9YyxWiTq6RmXYsH_63ZnjCJK00aDGxSTUBPUyTamgAOc$)