aol.pm

2015 Ukraine Electric Power Attack

Campaign · ATTACK:enterprise:C0028

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:C0028",
  "title": "2015 Ukraine Electric Power Attack",
  "type": "Campaign",
  "source_url": "https://attack.mitre.org/campaigns/C0028",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "campaign--46421788-b6e1-4256-b351-f8beffd1afba",
  "external_id": "C0028",
  "domain": "enterprise",
  "created": "2023-09-27T13:11:52.340Z",
  "modified": "2026-08-04T20:48:44.047Z",
  "version": "1.0",
  "aliases": [
    "2015 Ukraine Electric Power Attack"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Booz Allen Hamilton",
      "url": "https://www.boozallen.com/content/dam/boozallen/documents/2016/09/ukraine-report-when-the-lights-went-out.pdf"
    }
  ]
}

Explicit source assertions (20)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--04427a61-cef7-4197-9ff4-cb36c6a1895e

Ukraine15 - EISAC - 201603

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--052acd65-b05a-4645-943b-1c53a717c419

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:S0607

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1dad5efc-395f-4b92-8f4f-3e987a4d5e57

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--273e10a7-c598-4e06-be21-a8ec7537eeb6

Booz Allen Hamilton

ATTACK:enterprise:C0028 → attributed-to → ATTACK:enterprise:G0034

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d407dda-944a-4974-b1c2-0a04d2c9ee4c

Andy Greenberg June 2017 · US District Court Indictment GRU Unit 74455 October 2020

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d9acf03-bd3e-458b-bcea-6d1b57674072

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1018

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--61ce754c-da32-4f0d-9c5f-bdf4debf7377

Charles McLellan March 2016

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1133

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--62ed20e9-07e5-4e22-a8dd-b93ab89706e3

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7d12ca01-c979-4fdf-8548-9da12c105ba0

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--874f8662-0ec0-48e4-901b-270ac9ed63e6

Ukraine15 - EISAC - 201603

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87c33110-cbd9-4925-bf95-4570729ee935

Ukraine15 - EISAC - 201603

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1040

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--899c49f0-4a1b-44d8-81e6-fd927a252bd6

Charles McLellan March 2016

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1136.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a14f269-467e-49f8-a53f-ba1ad7fe5731

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a2d91513-68d5-4df2-ab2f-05a25b72f419

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2c3af15-670d-4775-ba38-e585f421b846

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2f02a93-36fe-45be-9120-ea7bf53a884c

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1570

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c39edafb-5a90-43a3-af9f-6865c5a6a71f

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:S0089

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8e78d6f-ac9d-4ad3-ae13-238f1eb4423a

Booz Allen Hamilton

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d2aa3c9f-0f1f-49ff-81ef-94e229f7c6e2

Booz Allen Hamilton · Ukraine15 - EISAC - 201603

ATTACK:enterprise:C0028 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--edb47407-d848-4b72-abe6-9815aeaaaf37

Booz Allen Hamilton

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.