C0025 · 2016 Ukraine Electric Power Attack

Sunturai

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice

C0025 · 2016 Ukraine Electric Power Attack · Sunturai

campaignenterprise-attackC0025

2016 Ukraine Electric Power Attack

campaign--aa73efef-1418-4dbe-b43c-87a498e97234

2016 Ukraine Electric Power Attack was a Sandworm Team campaign during which they used Industroyer malware to target and disrupt distribution substations within the Ukrainian power grid. This campaign was the second major public attack conducted against Ukraine by Sandworm Team.(Citation: ESET Industroyer) (Citation: Dragos Crashoverride 2018)

Created: Mar 31, 2023, 5:22 PM UTC
Modified: Jul 31, 2026, 9:05 PM UTC

External references

mitre-attackC0025Open reference

ESET IndustroyerOpen reference

Dragos Crashoverride 2018Open reference

Platforms

This kind of object does not name platforms.

Kill chain phases

Only techniques sit in a kill chain phase.

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

Incoming and outgoing edges in the selected ATT&CK release
Direction	Type	Related object