Inside the Cunning, Unprecedented Hack of Ukraine's Power Grid
On December 23, 2015, attackers carried out a coordinated operation against power distribution centers in Ukraine's Ivano-Frankivsk region and two other centers. They took about 60 substations offline and left more than 230,000 residents without power. The operation used spear-phishing, stolen credentials, hijacked VPN connections, SCADA control, UPS shutdowns, malware, and firmware overwriting. Ukrainian intelligence blamed Russia, but the source says it provided no supporting proof, and investigator Robert M. Lee did not attribute the attack to a specific actor.
CERT24