Ukrainian Winter Woes: FrostyGoop Malware Freezes Lviv in Cyberattack Chill
Ukrainians in Lviv shivered for two days after a cyberattack using FrostyGoop malware turned off central heating. Dragos researchers uncovered the malware targeting industrial control systems, showing hackers’ increased efforts to disrupt critical infrastructure.

Hot Take:
Just when you thought winter couldn’t get any colder, some folks in Lviv found out the hard way that even heating systems can catch a virus. Who knew your boiler could use a firewall?
Key Points:
- Cyberattack in Lviv left 600 apartment buildings without heating for two days.
- Malware FrostyGoop targets industrial control systems, specifically heating controllers.
- Dragos detected the FrostyGoop malware in April, but it was actively used in January.
- Attackers exploited a vulnerability in an internet-exposed Mikrotik router.
- Dragos refrains from attributing the attack to any specific hacking group or government.
Already a member? Log in here