iSight uploaded the BlackEnergy malware sample to VirusTotal, a kind of Google search engine for malware that researchers use to see where a piece of malware may have popped up before. VirusTotal revealed that four months earlier, in May 2014, attackers had used the same BlackEnergy attack to pop a Polish energy company, this time with a Microsoft Word file that purported to include the latest update on European oil and gas prices.
