This Is How They Tell Me the World Ends: The Cyberweapons Arms Race

by Nicole Perlroth

Sandworm’s attackers were targeting “.cim” and “.bcl” files, two file types used by General Electric’s industrial control Cimplicity software—the same software Peabody’s engineers used to remotely check on their mining equipment.