The attack was the first in five years to use Sandworm's Industroyer malware.
ESET researchers have responded to a cyber-incident that affected an energy provider in Ukraine and involved ICS-capable malware called Industroyer2.