An advanced threat actor is exploiting known vulnerabilities in ICS communication protocols to move laterally within the network. The attacker aims to control interconnected systems and expand their reach.