There are some limitations to the malware in its current form. Dragos researchers believe it would not lead to a catastrophic event but could cause outages of several hours at targeted locations or several day outages across multiple sites.
"CRASHOVERRIDE is an extremely concerning capability but should not be taken with any "doom and gloom" type scenarios. Everything past single substation events and small islanding events of targeting a few multiple locations is purely speculation and not worth discussion at this time," Dragos concludes.
Sign up for CIO Asia eNewsletters.