Date of report
- December 2016
Affiliations
- Used an evolution of the tools used by Sandworm.
A threat actor compromised computer networks that control an electricity substation in the north of the Ukrainian capital, Kiev, causing a power outage. To accomplish its task, the threat actor used a tool known as CrashOverride.
Suspected victims
- Ukrenergo
Suspected state sponsor
- Russian Federation
Type of incident
- Sabotage
Target category
- Private sector
Victim government reaction
- Unknown