Compromiseseverity: Critical2015-12-23
Coordinated attack on Ukrainian electricity distribution
published by CISA (ICS-CERT)
Actor
Russian military-intelligence (GRU Unit 74455) intrusion set responsible for some of the most destructive cyberattacks publicly attributed to a nation-state: the 2015 and 2016 Ukrainian power-grid ou…
Summary
Three Ukrainian regional electricity distribution companies (oblenergos) were simultaneously attacked, cutting power to approximately 225,000 customers for several hours. ICS-CERT and later attribution work tied the operation to Sandworm; this is widely regarded as the first publicly confirmed cyberattack to cause a power outage.
Tags
icsukrainedestructionenergy