Cybersecurity incident
Date: 2016-02-11 00:00:00
Affected organization: Ukrainian railway operator
Affected country: Ukraine
Industry: Transportation and Warehousing
Event type: Disruptive
Event subtype: Data Attack
Motive: Sabotage
Actor: GRU Main Special Center for Special Technologies (Unit 74455) (SANDWORM)
Actor type: Nation-State
Actor country: Russian Federation
Description: Researchers from Trend Micro unveil further details on the attacks targeting Ukraine in December. Samples of the same BlackEnergy family have been used to target a mining company and a railway operator in Ukraine.