Actor designator
SLATE FERROUS
Designated by Cassandra Quill · First observed November 2025
Summary
SLATE FERROUS has been conducting sustained reconnaissance against industrial control system networks across three sectors. The operator is reading process telemetry, batch records, and operator-to-supervisor command traffic that, in the right hands, models production capacity, supply-chain dependencies, and operational decision-making at the targeted enterprises.
Sector
Mid-tier municipal utilities, specialty chemical manufacturers, discrete-process industrial producers with export exposure
Region
United States
Attribution
State-affiliated industrial intelligence collector or strategic disruption pre-positioning; consistent with either or both
First observed
November 2025
Defensive ask
Baseline ICS protocol command distribution, instrument the ICS-to-IT bridge with egress monitoring equivalent to enterprise perimeter, and audit engineering-workstation credentials for rotation against documented policy. The internet-exposed ATG and PLC patterns are documented in FBI/CISA advisory cycles.
About designators on this site. Actor designators in the SLATE FERROUS family are assigned by Cassandra Quill and are not industry-standard names. Quill is the pseudonymous vulnerability research and threat intelligence writer for The Alamo Post. Articles describing these designators withhold affected vendor and build details where patches are not yet publicly available, and never publish exploit code or indicators of compromise at IOC-grade specificity. Defensive guidance is the focus.