BlackEnergy Malware Campaign Compromising ICS Security Notification

This document is a security notification from Schneider Electric regarding a sophisticated malware campaign using a variant of BlackEnergy that has compromised Industrial Control Systems (ICS) via internet-connected Windows-based HMIs. It references an ICS-CERT alert, recommends using the Yara tool with a specific signature file for detection, and advises asset owners to contact ICS-CERT if indicators of compromise are found.