Skip to main content
Ein führendes Unternehmen im Gartner® Magic Quadrant™ 2026 für Endpoint-Schutz. Sechs Jahre in Folge.Erfahren Sie warum
SentinelOne Discovers a New Delivery Tactic for BlackEnergy 3
From the Front Lines
1 min readUpdated: 15. Mai 2024

SentinelOne Discovers a New Delivery Tactic for BlackEnergy 3

By Ehud Shamir

We’ve recently detected a new distribution mechanism for BlackEnergy 3 that’s actively in use today affecting SCADA systems across Europe. BlackEnergy of course has been in existence since 2007, and has evolved significantly into a complete rootkit that can perform data exfiltration and network sniffing, among other tasks. In the following write up SentinelOne security researchers detail the results of reverse engineering this latest sample that demonstrates a new delivery tactic utilizing Microsoft Office.

You can download the full report here.

Related Articles

  • SEO-Poisoning-Attack-How-Attackers-Are-Hijacking-Search-Results-1
    From the Front Lines
    5 min read

    SEO Poisoning: Risks, Solutions & Indicators of Compromise

  • Illicit-Brand-Impersonation-A-Threat-Hunting-Approach-5
    From the Front Lines
    6 min read

    Illicit Brand Impersonation | A Threat Hunting Approach

  • Emotet_-The-Story-of-Disposable-C2-Servers-1
    From the Front Lines
    6 min read

    Emotet: The Story of Disposable C2 Servers

  • Resource Default image
    From the Front Lines
    2 min read

    GovRAT: Remote Administration Tool Targets US Government Employees

Decorative background gradient

Subscribe

Get the Latest From the 
SentinelOne Blog