Security News > 2022 > April > Cyberattacks Rage in Ukraine, Support Military Operations

Cyberattacks Rage in Ukraine, Support Military Operations
2022-04-28 12:46

Cyberattacks against Ukraine have been used strategically to support ground campaigns, with five state-sponsored advanced persistent threat groups behind attacks that began in February.

From late February to mid-March, another series of wiper attacks using malware called HermeticWiper, IsaacWiper and CaddyWiper targeted organizations in the Ukraine as Russia commenced its physical invasion.

The report includes a specific timeline of attacks and the malware used in the earliest weeks of the attack to support Russia's military activities.

During the Russian war on Ukraine the group has used phishing attacks to distribute malware, most recently new variants of the "Backdoor.Pterodo" malware payload, according to researchers.

Since Russia attacked Ukraine UNC1151 the group has been linked to the defacement of multiple Ukrainian government websites as well as spearphishing campaigns targeting the email and facebook accounts of Ukrainian military personnel to spread the MicroBackdoor malware.

"The number of cyberattacks in Ukraine will increase during the next six months. While most of the current attacks are of low complexity - such as DDoS or attacks using commodity and low-quality tools - more sophisticated attacks exist also, and more are expected to come," Kaspersky researchers wrote.


News URL

https://threatpost.com/cyberwar-ukraine-military/179421/