The people who carried out last month's first known hacker-caused power outage used highly destructive malware to gain a foothold into multiple regional distribution power companies in Ukraine and to delay restoration efforts once electricity had been shut off, a newly published analysis confirms.

The malware known as BlackEnergy allowed the attackers to gain a foothold on the power-company systems, said the report, which was...