Working remotely, attackers conducted “extensive reconnaissance” of the Ukraine power system’s networks, stole the credentials of operators and learned how to switch off the breakers, plunging more than 225,000 Ukrainians into darkness.