Black Energy - A Malware Attack in Ukraine

In april, two thousand 15, an unknown number of employees in three such distribution companies fell victim to a spear fishing attack. The attackers spent many months collecting detailed intelligence about the ukranian electricity system. They found that employees did not use two factor authentication when they connected remotely to the industrial control network computers. This mean that all the attackers needed to penetrate the industrial network were credentials. Black energies key logging functionality made it easy for them to get these credentials.