Cisco stands on guard with our customers in Ukraine
Summary: Cisco employees set aside their normal tasks to watch over Ukrainian networks, care for and protect refugees, and turn social media monitoring into open-source intelligence work, with approvals coming fast for plans that would have been unthinkable a week earlier. Cisco Talos reports observing a destructive attack on a Ukrainian critical infrastructure entity using a previously unknown wiper it calls "PathWiper," and is tracking a campaign targeting Ukrainian users with malicious LNK files that run a PowerShell downloader since at least November 2024, plus a wave of attacks since at least late 2023 by a Russian-speaking group tracked as "UAT-5647" against Ukrainian government entities and unknown Polish entities.
Bottom line: A previously unknown wiper deployed against a critical infrastructure entity in Ukraine, alongside attacks on government entities and unidentified Polish targets, shows destructive operations are not confined to one victim country or one toolset.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026