78trust / 100

Ot Malware

by ot-intel-api.onrender.com in Security & trust

x402 APIPassing, checked 38 min ago

ICS malware encyclopedia. Pass ?name=PIPEDREAM. Returns capabilities, targeted OT protocols, attributed actor, affected vendors, detection signatures, and MITRE ATT&CK ICS techniques. Covers PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE, FROSTYLOOP, BLACKENERGY.

GET https://ot-intel-api.onrender.com/ot/malware

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
244 ms typical, 666 ms slowest 5%
Last check
38 min ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://ot-intel-api.onrender.com/ot/malware?name=PIPEDREAM"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fot-intel-api.onrender.com%2Fot%2Fmalware
const res = await pay("https://ot-intel-api.onrender.com/ot/malware?name=PIPEDREAM");
console.log(await res.json());

Example input

{
  "name": "PIPEDREAM"
}

Example output

{
  "affected_vendors": [
    "Schneider Electric",
    "OMRON"
  ],
  "aliases": [
    "INCONTROLLER"
  ],
  "attributed_actor": "CHERNOVITE",
  "capabilities": [
    "discovery",
    "lateral_movement",
    "disruption",
    "destruction"
  ],
  "confidence": "high",
  "data_sources": [
    "Dragos-Threat-Intelligence",
    "OT-Intel-DB",
    "MITRE-ATT&CK-ICS",
    "DeepSeek-CTI-Analysis"
  ],
  "detection_signatures": [
    "YARA rule: PIPEDREAM_loader",
    "Anomalous CODESYS write commands"
  ],
  "first_seen": "2022",
  "mitre_techniques": [
    "T0843",
    "T0821",
    "T0855"
  ],
  "name": "PIPEDREAM",
  "targeted_protocols": [
    "Modbus",
    "OPC UA",
    "CODESYS",
    "IEC 61850"
  ]
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
38 min agoPassed402244 ms$0.02
4 h agoPassed402706 ms$0.02
8 h agoPassed402231 ms$0.02
11 h agoPassed402659 ms$0.02
15 h agoPassed402251 ms$0.02
18 h agoPassed402235 ms$0.02
22 h agoPassed402221 ms$0.02
26 h agoPassed402209 ms$0.02
29 h agoPassed402220 ms$0.02
34 h agoPassed402666 ms$0.02
37 h agoPassed402593 ms$0.02
42 h agoPassed402576 ms$0.02