from the quick read, it looks like a spear phishing attack at the root of it.
---
According to the report by the FBI and DHS, the hackers involved in the Russian operation used fraudulent emails that tricked their recipients into revealing passwords.
---
This incident should be investigated thoroughly and serious defenses should be put in place. Destabilizing the electric grid like the Kiev incident shouldn't be allowed.