Sign up for our daily briefing

Make your busy days simpler with Axios AM/PM. Catch up on what's new and why it matters in just 5 minutes.

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Denver news in your inbox

Catch up on the most important stories affecting your hometown with Axios Denver

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Des Moines news in your inbox

Catch up on the most important stories affecting your hometown with Axios Des Moines

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Minneapolis-St. Paul news in your inbox

Catch up on the most important stories affecting your hometown with Axios Twin Cities

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Tampa Bay news in your inbox

Catch up on the most important stories affecting your hometown with Axios Tampa Bay

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Charlotte news in your inbox

Catch up on the most important stories affecting your hometown with Axios Charlotte

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Please enter a valid email.

Please enter a valid email.

Subscription failed
Thank you for subscribing!

Statue of Triton, son of Neptune, Nicola Salvi's Trevi Fountain, Italy. Photo: DeAgostini/Getty Images

The attackers who launched TRITON, a notorious industrial-system-focused malware only known to have been used once, have struck a second target, according to researchers at FireEye presenting at the Kaspersky Lab SAS Summit in Singapore.

Why it matters: FireEye was the first to discover TRITON, which startled researchers by amassing an uncommon amount of control over industrial systems. Due to a mistake in the attack, it inadvertently led to a plant shutdown and nearly caused a deadly explosion. While no one expected TRITON to be a one-time affair, its resurgence is jarring.

Background: The victim of the first attack was not identified by FireEye, but a harrowing account of the attack in E&E News revealed it to be the Petro Rabigh refinery in the Red Sea.

  • FireEye later attributed the design of components of the TRITON malware to a research institute in Moscow.

Details: The new victim, also not identified by FireEye, revealed the use of hacking tools not seen in the first attack.

  • The tools appear to date from as far back as 2014, though FireEye has never seen them in use in the past.
  • FireEye reported indicators and recommended techniques defenders can use to identify and thwart future TRITON attacks.
  • "[W]e strongly encourage industrial control system (ICS) asset owners to leverage the indicators, TTPs [tactics, techniques and procedures], and detections," FireEye wrote in its official report.

Go deeper

Updated 14 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Eniola Odetunde/Axios

Dave Lawler, author of World
28 mins ago - World

Biden holds first phone call with Putin, raises Navalny arrest

Putin takes a call in 2017. Photo: Handout/Anadolu Agency/Getty

President Biden on Tuesday held his first call since taking office with Vladimir Putin, pressing the Russian president on the arrest of opposition leader Alexey Navalny and the Russia-linked hack on U.S. government agencies, AP reports.

The state of play: Biden also planned to raise arms control, bounties allegedly placed on U.S. troops in Afghanistan and the war in Ukraine, according to White House press secretary Jen Psaki, who said the call took place while she was delivering a press briefing. Psaki added that a full readout will be provided later Tuesday.

Biden signs racial equity executive orders

Joe Biden prays at Grace Lutheran Church in Kenosha, Wisconsin, on September 3, 2020, in the aftermath of the police shooting of Jacob Blake. PHOTO: Jim Watson/AFP via Getty Images

President Joe Biden on Tuesday signed executive orders on housing and ending the Justice Department's use of private prisons as part of what the White House is calling his “racial equity agenda.”

The big picture: Biden needs the support of Congress to push through police reform or new voting rights legislation. The executive orders serve as his down payment to immediately address systemic racism while he focuses on the pandemic.