An Analysis of the Sandworm Team in Ukraine

  • Thursday, 21 Jan 2016 11:00AM EST (21 Jan 2016 16:00 UTC)
  • Speaker: Robert M. Lee

iSIGHT Partners will detail its linkage of the recent intrusions against Ukrainian Power Authorities to the cyber espionage team it calls Sandworm Team. It will highlight intelligence on Sandworm Teams activities ' which originated in 2013. The discussion will center around a timeline on visible events such as the 2014 campaign leveraging CVE-2014-4114 against Ukraine government, EU, NATO and energy targets, activities throughout 2015 and the culminating event against the Ukrainian Power Authority. A discussion on Sandworm Team's known focus on critical infrastructure will also be included along with broader thoughts for the implications of the Ukrainian incident on the energy and critical infrastructure communities as a whole.

ICS Security Summit

Learn more about securing industrial control systems and the Ukrainian Power Authority attacks at the upcoming ICS Security Summit in Orlando, FL on February 22 & 23, 2016.

The Summit is the premier event to attend in 2016 for ICS cybersecurity practitioners and managers. This year's summit will center on the theme "Defense is Doable" and will feature more in-depth technical talks, case studies, and hands-on challenges than ever before.

Attendees will:
  • Understand how ICS systems are being targeted
  • Learn how to safeguard ICS against the new threat matrix
  • Gather with fellow practitioners to share skills and acquire new ones
  • Explore how cyber-informed engineering mixes with cyber security for ICS success
  • Discover best practices for teaching operators cyber security awareness
  • Test and expand ICS security knowledge through exciting hands-on challenges