Threat Brief: Shamoon 2 Wave 3 Attacks
Summary: Palo Alto Networks Unit 42 reported a third wave of Shamoon 2 attacks set to wipe systems with the Disttrack malware on January 23, 2017, following waves that wiped systems on November 17 and November 29, 2016. Unit 42 said the wave 3 samples matched the earlier waves in attack vectors, payloads and actions taken, with no new intelligence to share on those, and that additional waves are possible.
What you should know: A destructive wiper has now been scheduled to fire on three separate dates, and Unit 42's assessment is that more waves may follow - so the question is whether your backups and disaster recovery plans have been tested against a wiping event, not just an outage.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026