>>4032871 (LB)

ding ding ding

"BlackEnergy' hack of the Ukrainian power grid. Dec 2015

A power blackout that recently affected about 1.4 million Ukrainians has been tied to the espionage Trojan known as BlackEnergy. The attack appears to be the first time that malware has been used to facilitate a large-scale power disruption.

ESET says the malware used in the attacks was the BlackEnergy Trojan, which has previously been tied to Russian attackers, and which is often used to install additional attack modules on victims' systems. After infecting these ICS systems, for example, this particular BlackEnergy variant was then designed to install wiper malware called KillDisk, which overwrites or deletes data on hard drives and can also render them unbootable. ESET has released indicators of compromise tied to the attacks, which other organizations can use to help detect and block related - or copycat - exploits.

https://www.bankinfosecurity.com/ukrainian-power-grid-hacked-a-8779