C0034 2022 Ukraine Electric Power Attack

active2022-06-01 – 2022-10-01

also known as2022 Ukraine Electric Power Attack

The 2022 Ukraine Electric Power Attack was a Sandworm Team campaign that used a combination of GOGETTER, Neo-REGEORG, CaddyWiper, and living of the land (LotL) techniques to gain access to a Ukrainian electric utility to send unauthorized commands from their SCADA system.

01

attributed to

The group this is attributed to.

02

techniques used (15)

ATT&CK techniques this enables or maps to.

03

software used (1)

Malware and tools associated with this.

04

source

Where this definition is published.