XENOTIME has been a problem for critical infrastructure companies for some time now. The group has expanded its range of targets from oil and gas companies to the electric utility sector. Dragos researchers noted that the threat group could be using these attacks to try to fulfill some of the prerequisites for executing a prolonged disruptive or destructive event on electric utility operations. Critical infrastructure organizations should also use device inventories, automated scanning, advanced behavioral analytics and other tools to harden their industrial internet of things (IoT) systems.”]