Trusted Design

New wave of cyberattacks against Ukrainian power industry

概要

The cyberattacks against the Ukrainian electric power industry continue. Yesterday (January 19th) we discovered a new wave of these attacks, where a number of electricity distribution companies in Ukraine were targeted again following the power outages in December. What’s particularly interesting is that the malware that was used this time is not BlackEnergy, which poses further questions about the perpetrators behind the ongoing operation. The malware is based on a freely-available open-source backdoor – something no one would expect from an alleged state-sponsored malware operator.

Created: 2026-02-23

Indicators

• FileHash-SHA1 - 920eb07bc8321ec6de67d02236cf1c56a90fea7d -
• FileHash-SHA1 - bc63a99f494de6731b7f08dd729b355341f6bf3d -
• FileHash-SHA1 - 1dd4241835bd741f8d40be63ca14e38bbdb0a816 -

類似Pulses

• 20160119: Ukraine Power Industry Cyberattacks (score: 0.93)
• BlackEnergy by the SSHBearDoor (score: 0.78)
• Malicious Code Analysis on Ukraine's Power Grid Incident (score: 0.77)
• Domains and Hostnames from the BlackEnergy report (score: 0.77)
• Updated BlackEnergy Trojan Grows More Powerful (McAfee) (score: 0.71)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る