DEV-0586

MSTIC has not found any notable associations between this observed activity, tracked as DEV-0586, and other known activity groups. MSTIC assesses that the malware (WhisperGate), which is designed to look like ransomware but lacking a ransom recovery mechanism, is intended to be destructive and designed to render targeted devices inoperable rather than to obtain a ransom.

Qrupun mənşəyi Rusiya kimi bildirilir.

Digər adları: Ruinous Ursa, Cadet Blizzard

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/
• https://msrc-blog.microsoft.com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine/
• https://unit42.paloaltonetworks.com/atoms/ruinousursa/

Mənbə: MISP Galaxy, Malpedia.