Warning: This Post Contains Macros

The author describes the confirmed BlackEnergy-driven cyber attack on Ukraine's Ivano-Frankivsk power grid (December 23), highlighting that delivery relied on malicious VBA macros in Microsoft Office documents combined with social engineering; the piece contextualizes the incident as a sophisticated, coordinated campaign likely linked to nation-state actors and warns that macro-based delivery remains an effective and persistent threat.