Russia-Ukraine Cyberattacks (Updated): How to Protect Against Related Cyberthreats Including DDoS, Hermetic Wiper, Gamaredon, Website Defacement, Phishing and Scams
Summary: Unit 42 reported that DDoS attacks against Ukrainian government and banking institutions began Feb. 15, followed on Feb. 23 by a wiper named HermeticWiper and a new round of website defacements. The wiper, a signed file from Hermetica Digital Ltd whose certificate was later revoked, wipes partition information and forces a reboot, and ESET found it on hundreds of machines in Ukraine.
Key Takeaway: The wiper's kernel module came from a legitimate partition tool, EaseUS Partition Master, and it was deployed against a Ukrainian financial institution and two contractors in Latvia and Lithuania, so trusted software components and third-party suppliers are part of the attack surface.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026