Cybercriminals have especially designed malware to disrupt the operation of industrial control systems (ICS), particularly electrical substations. The malware CrashOverride/Industroyer is capable of directly controlling switches and circuit breakers in electrical substation circuits.