The sequence of events taken by the adversary in the months leading up to December 23, 2015 when a cyber operation targeting Ukrainian electricity infrastructure, resulting in power outages affecting approximately 225,000 customers. BlackEnergy 3, KillDisk and other IOCs (Indicators of Compromise) discovered during the investigation and the undeniable conclusions.

Nir started his career as a squad leader in the Israeli Intelligence Corps. He helped with gathering intelligence tracking the growth of terrorist organizations. Nir has over 10 years of experience as a security engineer both in visual and network security areas. He worked for multiple cyber security vendors for firewall management, compliance, and user behavior analytics. Nir publishes his posts on LinkedIn and speaks occasionally at security conferences.

Recorded at BSides Philly 2016