The federal agencies said the threat actors could use custom-built modular malware to scan for, compromise, and take control of ICS and SCADA devices from Schneider Electric, OMRON, and Open Platform Communications.