Dragos observed Voltzite exfiltrating operational and sensor data, and said the level of access the intruders had to the OT networks allowed them to potentially manipulate control systems. Sylvanite exploits known vulnerabilities in internet-facing products from F5, Ivanti, and SAP to provide Voltzite access into electric power generation, transmission and distribution, water, sewage, and oil and gas organizations across North America, the UK, Europe, Asia and the Middle East. In its new report, Dragos said that Kamacite serves as the initial access provider for Electrum, and it detailed a reconnaissance campaign that Kamacite carried out against vulnerable internet-exposed industrial devices in US water, energy, and manufacturing sectors between March and July 2025.
Author: Jessica Lyons
Published at: 2026-02-17 21:45:14
Still want to read the full version? Full article
