C0028 2015 Ukraine Electric Power Attack

active2015-12-01 – 2016-01-01

also known as2015 Ukraine Electric Power Attack

2015 Ukraine Electric Power Attack was a Sandworm Team campaign during which they used BlackEnergy (specifically BlackEnergy3) and KillDisk to target and disrupt transmission and distribution substations within the Ukrainian power grid. This campaign was the first major public attack conducted against the Ukrainian power grid by Sandworm Team.

01

attributed to

The group this is attributed to.

02

techniques used (37)

ATT&CK techniques this enables or maps to.

03

software used (2)

Malware and tools associated with this.

04

source

Where this definition is published.