Trusted Design

20160203-BlackEnergy by maldoc,Malware

概要

Black Energy is a malware that was believed to cause power cut in Ukraine, blackouting 80,000 customers of western Ukraine's Prykarpattyaoblenergo utility, DHS said the "BlackEnergy Malware" used in the attack appears to have infected Ukraine's systems via a corrupted Microsoft Word attachment. According to a Post form “Arbor Networks the security division of NETSCOUT” posted by Jose Nazaro on 10/12/2007, Black Energy is an HTTP-based botnet used primarily for DDoS attacks. Unlike most common bots, this bot does not communicate with the botnet master using IRC. Also, we do not see any exploit activities from this bot, unlike a traditional IRC bot. This is a small (under 50KB) binary for the Windows platform that uses a simple grammar to communicate. Most of the botnets we have been tracking (over 30 at present) are located in Malaysian and Russian IP address space and have targeted Russian sites with their DDoS attacks.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• BlackEnergy APT Attacks in Ukraine employ spearphishing Word (score: 0.69)
• BlackEnergy by the SSHBearDoor (score: 0.68)
• 20160119: Ukraine Power Industry Cyberattacks (score: 0.67)
• Domains and Hostnames from the BlackEnergy report (score: 0.67)
• New wave of cyberattacks against Ukrainian power industry (score: 0.67)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る