Russia’s Central Scientific Research Institute of Chemistry and Mechanics allegedly played a role in the use of the malware known as Triton or Trisis to bring down the Saudi refinery’s security defenses.
John Hultquist, director of intelligence at the security firm FireEye, said that the Moscow-based institute, known as TsNIIKhM, was “clearly developing a tool that could have fatal consequences.”