The attackers who were first spotted wielding the custom TRITON framework have targeted another critical infrastructure facility, FireEye researchers have revealed on Wednesday. Although, since they seem to have been active since at least 2014, its quite likely that they have managed to get access to other target environments and may still be present in some of them.

Read full article on Help Net Security