LightsOut for the Energy Sector

Zscaler ThreatLabZ reported a watering-hole attack targeting the energy sector in which a compromised law firm website served the LightsOut exploit kit to deliver a Remote Access Trojan to visitors; the activity resembles a prior campaign and raises concern about impacts to critical energy infrastructure.