This report discusses the convergence of crimeware and advanced persistent threat (APT) attacks, specifically focusing on the BlackEnergy malware and its related group, Quedagh. The report provides an overview of the attack vectors, target details, technical details, and network traffic associated with the BlackEnergy malware. The report also notes that BlackEnergy has been used by various criminal outfits for years and has been observed targeting Ukrainian government organizations for information harvesting. The report also mentions a new variant of BlackEnergy, named BlackEnergy 3, which was used by the same group for a politically-oriented attack. The report concludes by stating that the use of BlackEnergy for a politically-oriented attack is an intriguing convergence of criminal activity and espionage.
