Section 2: BlackEnergy (2015)
In December 2015, Ukraine experienced one of the most disruptive cyberattacks in industrial history when the BlackEnergy malware struck the Ukrainian power grid, cutting electricity to approximately 230,000 people for several hours during the winter season.
- Target: Ukrainian power grid.
- Method: Phishing emails with malicious macros.
- Impact: 230,000 people lost power for hours.
- Lesson: OT systems are vulnerable to IT-based entry points
