NexaPulse
Subscribe
Intrusion setG0088

TEMP.Veles

Also tracked as XENOTIME

TEMP.Veles is a Russia-based threat group that has targeted critical infrastructure. The group has been observed utilizing TRITON, a malware framework designed to manipulate industrial safety systems.

Documented techniques
0
Assessed origin
Russia
Basis
MITRE ATT&CK

Tools

Legitimate or dual-use software the group is documented using. Most of it is software your own administrators use too, which is the point.

MimikatzPsExec

Campaigns

C0032Triton Safety Instrumented System Attack
Source: MITRE ATT&CK View the original record · Last synchronised 2026-09-09 · Origin and motivation are read from MITRE’s own description and are not structured fields in ATT&CK. Where the text does not attribute a group, this page leaves them blank rather than guessing.