Whitepaper
What you need to know about the increased Digital Risks following the cyber-attacks on Ukraine
Amidst the ongoing warfare, we were able to track the development of new dedicated and tailored malware (HermeticWiper and Whisper Gate) on the dark web forums, which were specifically crafted for the war. Now there are several reputable sources providing the same intelligence. Technical analysis of the malware indicates their destructive capabilities. Currently, the primary […]
Amidst the ongoing warfare, we were able to track the development of new dedicated and tailored malware (HermeticWiper and Whisper Gate) on the dark web forums, which were specifically crafted for the war. Now there are several reputable sources providing the same intelligence. Technical analysis of the malware indicates their destructive capabilities. Currently, the primary intent and usage are still limited to the cyberwarfare against Ukraine.
However, it is of utmost importance to be aware of these threats and stay prepared, as whenever the military goals for these malware are achieved, they will soon transfer to target commercial markets or even sooner, targeting western organizations due to supporting Ukraine. Which means our businesses might be one of the next targets, either directly or by the supply-chain attacks.
This whitepaper covers detailed analysis of known malware used in cyberwarfare, with guidelines on how to mitigate, detect and respond to them.
About the author
David Kasabji
Principal Threat Intelligence Engineer
David began his career as a software developer at NXP Semiconductors in Austria, where he was hired after completing his degree in electrical engineering (FERI). Early in his career, he became interested in cryptography, and his passion led him into the fields of encryption, security, and cybersecurity. At NIL, he began his career as a security analyst. After more than five years of experience at the same company, he became a lead security intelligence analyst. David’s work includes data analysis and engineering, malware reverse engineering, developing TTPs, publishing R&R content, and advising clients on investments in cybersecurity.
Related
