Menu
Russian group suspected to be linked to Ukraine power station cyberattack

Russian group suspected to be linked to Ukraine power station cyberattack

iSight Partners says the Sandworm team is likely involved

A cyberattack that knocked out power in the Ukraine last month is believed to have been initiated by a hacking group with strong Russian interests.

iSight Partners, a cybersecurity firm headquartered in Dallas, wrote on Thursday that a group called Sandworm was likely involved.

The link was made after a study of a malware sample called KillDisk and a related one used by Sandworm in the past called BlackEnergy 3, wrote John Hultquist, director of cyberespionage analysis at iSight Partners.

Another security company, Eset, wrote in a post last week that samples of BlackEnergy have carried the KillDisk component, which overwrites or deletes files.

Ukraine's CERT wrote in November that media in the country had been targeted by BlackEnergy around the time local elections were held.

iSight Partners first described Sandworm in October 2014, and since then several other security vendors have written about its activities.

The group has targeted NATO, western and Ukrainian government organizations and energy companies, according to an iSight document published by the Washington Post.

The latest attack, which occurred on Dec. 23 at a facility run by the service provider Prykarpattyaoblenergo, cut power to 80,000 customers for six hours, according to Reuters, which cited a report from a U.S. energy industry security group.

The attack has raised widespread concern as security experts have warned for years of the vulnerability of industrial control systems used by the energy industry.

"A cyberattack of this nature is a milestone – although a predictable one," Hultquist wrote. "The aggressive nature of Sandworm team’s previous activity in Europe and the United States exposed their interest in targeting critical systems and indicated preparation for cyber attack."

Tension have remained high between the Ukraine and Russia since the latter forcibly annexed Crimea in 2014.


Follow Us

Join the newsletter!

Error: Please check your email address.

Featured

Slideshows

Looking back at the top 15 M&A deals in NZ during 2017

Looking back at the top 15 M&A deals in NZ during 2017

In 2017, merger and acquisitions fever reached new heights in New Zealand, with a host of big name deals dominating the headlines. Reseller News recaps the most important transactions of the Kiwi channel during the past 12 months.

Looking back at the top 15 M&A deals in NZ during 2017
Kiwi channel closes 2017 with After Hours

Kiwi channel closes 2017 with After Hours

The channel in New Zealand came together to celebrate the close of 2017, as the final After Hours played out in front of a bumper Auckland crowd.

Kiwi channel closes 2017 with After Hours
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP honoured leading partners across the channel at the Partner Awards 2017 in New Zealand, recognising excellence across the entire print and personal systems portfolio.

Meet the top performing HP partners in NZ
Show Comments