How a ‘Phantom Mouse’ and Weaponized Excel Files Brought Down Ukraine’s Grid

By Rich Heidorn Jr. Sometime last spring, employees of three Ukrainian electric distribution companies opened Microsoft Office files infected with BlackEnergy 3 malware. It was the beginning of a six-month campaign of reconnaissance and testing that culminated Dec. 23 with an outage that knocked out power to 225,000 customers for...