Industroyer2 with Robert Lipovsky of ESET

This was a last minute addition to S4x22 as it was disclosed only the week before. Robert Lipovsky was part of the team at ESET that did the discovery and analysis.
0 - 12:30 Intro and background of Industroyer
12:30 Industroyer2 discovery, deployment details, functionality and deep dive into technical details
21:50 Sandworm's efforts in Ukraine
And two questions at the end.

[@OTbase]

Service message:
- First 13 minutes of the talk are ESET marketing and a re-hash of the 2015 attack
- "Industroyer2" never got executed, no damage done, but... whatever, since we have no real attacks to talk about.

[@S4Events]

I think your second bullet would be more applicable to Incontroller/Pipedream. Industroyer was deployed on a utility and appeared to be customized to attack this specific system. To me this is a real attack that was found before the button was pushed (or it failed).