New Havex remote access Trojan has capability to actively scan OPC (Object linking and embedding) servers used for controlling SCADA systems in critical infrastructure, energy, and manufacturing sectors. OPC is pervasive and is one of the most common ICS protocols. The full extent of industries and ICS systems affected by Havex is unknown. It appears that this new variant is used as a tool for future intelligence gathering, researchers from FireEye have said. Researchers set up a typical OPC server environment to test the new variant’s functionality.
Source: https://thehackernews.com/2014/07/new-variant-of-havex-malware-scans-for.html