Cybersecurity incident
Date: 2016-12-15 00:00:00
Affected organization: Undisclosed Ukrainian banks
Affected country: Ukraine
Industry: Finance and Insurance
Event type: Mixed
Event subtype: Exploitation of Application Server,Data Attack,Exploitation of End Host
Motive: Sabotage
Actor: GRU Main Special Center for Special Technologies (Unit 74455) (SANDWORM)
Actor type: Nation-State
Actor country: Russian Federation
Description: ESET reports that BlackEnergy, the same group who targeted Ukrainian utilities last December has been using the TeleBots malware against Ukrainian banks in the last month.