S0089 BlackEnergy
malwareEnterpriseICSplatformsWindows
also known asBlackEnergy · Black Energy
BlackEnergy is a malware toolkit that has been used by both criminal and APT actors. It dates back to at least 2007 and was originally designed to create botnets for use in conducting Distributed Denial of Service (DDoS) attacks, but its use has evolved to support various plug-ins. It is well known for being used during the confrontation between Georgia and Russia in 2008, as well as in targeting Ukrainian institutions. Variants include BlackEnergy 2 and BlackEnergy 3.
techniques used (28)
ATT&CK techniques this enables or maps to.
used by groups (1)
Threat groups associated with this.
used by campaigns (1)
Campaigns that use this.
source
Where this definition is published.
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan