corpus.blog
41554 blogs · 4,504,310 posts Claim your blog
Record · corpus.blog/posts/01a087cc-0816-7330-981b-6ed0f760176f

Attributive Questions in High Profile Incidents

pylos.co · published 31 January 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pylos.co Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
43
Words captured
2,461

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
http://cert.pl
cert.pl
https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/
cert.pl
ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
welivesecurity.com
https://5943619.hs-sites.com/hubfs/Reports/dragos-2025-poland-attack-report.pdf
5943619.hs-sites.com
https://www.linkedin.com/pulse/what-happened-poland-part-i-ruben-santamarta-bknye
linkedin.com
https://www.iea.org/reports/unlocking-the-potential-of-distributed-energy-resources
iea.org
https://www.entsoe.eu/publications/blackout/28-april-2025-iberian-blackout/
entsoe.eu
https://attack.mitre.org/groups/G0034/
attack.mitre.org
https://media.defense.gov/2020/May/28/2002306626/-1/-1/0/CSA%20Sandworm%20Actors%20Exploiting%20Vulnerability%20in%20Exim%20Transfer%20Agent%2020200528.pdf
media.defense.gov
https://www.gov.uk/government/publications/russias-fsb-malign-cyber-activity-factsheet/russias-fsb-malign-activity-factsheet
gov.uk
https://attack.mitre.org/groups/G0035/
attack.mitre.org
https://vblocalhost.com/uploads/VB2021-Slowik.pdf
vblocalhost.com
https://www.fbi.gov/investigate/cyber/alerts/2025/russian-government-cyber-actors-targeting-networking-devices-critical-infrastructure
fbi.gov
https://www.jstor.org/stable/24590776
jstor.org
https://attack.mitre.org/campaigns/C0028/
attack.mitre.org
https://attack.mitre.org/campaigns/C0025/
attack.mitre.org
https://attack.mitre.org/campaigns/C0034/
attack.mitre.org
https://www.eset.com/us/about/newsroom/research/eset-research-ukraine-hit-by-destructive-attacks-before-and-during-the-russian-invasion-with-hermet/?srsltid=AfmBOoq-VyaYWggZq-Cf--5a3gAzIMkhTmXoGqnjkg5msPSv9FkNYZC_
eset.com
https://www.welivesecurity.com/2022/03/15/caddywiper-new-wiper-malware-discovered-ukraine/
welivesecurity.com
https://www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/
microsoft.com
https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=7382dce7-0260-4782-84cc-890971ed3f17&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68
community.broadcom.com
https://www.cisa.gov/news-events/alerts/2018/03/15/russian-government-cyber-activity-targeting-energy-and-other-critical-infrastructure-sectors
cisa.gov
https://ecfr.eu/wp-content/uploads/ECFR_169_-_PUTINS_HYDRA_INSIDE_THE_RUSSIAN_INTELLIGENCE_SERVICES_1513.pdf
ecfr.eu
https://learn.microsoft.com/en-us/unified-secops/microsoft-threat-actor-naming
learn.microsoft.com
https://www.dragos.com/threat/electrum
dragos.com
DynoWiper update: Technical analysis and attribution
welivesecurity.com
https://www.dragos.com/blog/poland-power-grid-attack-electrum-targets-distributed-energy-2025
dragos.com
https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf
cert.pl
https://www.youtube.com/watch?v=KJIqgQKoHYghttps://www.youtube.com/watch?v=KJIqgQKoHYg
youtube.com
https://pylos.co/wp-content/uploads/2020/02/Threat-Intelligence-and-the-Limits-of-Malware-Analysis.pdf
pylos.co
https://cloud.google.com/blog/topics/threat-intelligence/cyber-operations-russian-vulkan
cloud.google.com
https://www.youtube.com/watch?v=H7bV_99I7O4
youtube.com
https://cloud.google.com/blog/topics/threat-intelligence/sandworm-disrupts-power-ukraine-operational-technology/
cloud.google.com
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-orb-networks
cloud.google.com
https://blog.lumen.com/routers-roasting-on-an-open-firewall-the-kv-botnet-investigation/
blog.lumen.com
https://www.lemonde.fr/en/pixels/article/2023/03/30/skan-the-cyberattack-tool-developed-by-vulkan_6021229_13.html
lemonde.fr
https://www.virusbulletin.com/uploads/pdf/conference/vb2022/papers/VB2022-Zeroing-in-on-XENOTIME-analysis-of-the-entities-responsible-for-the-Triton-event.pdf
virusbulletin.com
https://www.crowdstrike.com/en-us/blog/bears-midst-intrusion-democratic-national-committee/
crowdstrike.com
https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/LM-White-Paper-Intel-Driven-Defense.pdf
lockheedmartin.com
https://www.threatintel.academy/wp-content/uploads/2020/07/diamond-model.pdf
threatintel.academy
https://www.mitre.org/sites/default/files/publications/pr-18-0944-11-mitre-attack-design-and-philosophy.pdf
mitre.org
https://www.domaintools.com/content/conceptualizing-a-continuum-of-cyber-threat-attribution.pdf
domaintools.com
https://www.nato.int/en/what-we-do/introduction-to-nato/collective-defence-and-article-5
nato.int