[ad_1]
The coordinated cyberattacks concentrating on Ukrainian authorities web sites and the deployment of a data-wiper malware referred to as WhisperGate on choose authorities methods are a part of a broader wave of malicious actions aimed toward sabotaging crucial infrastructure within the nation.
The Secret Service of Ukraine on Monday confirmed that the 2 incidents are associated, including the breaches additionally exploited the lately disclosed Log4j vulnerabilities to realize entry to a number of the compromised methods.
“The assault used vulnerabilities within the web site’s content material administration methods (October CMS) and Log4j, in addition to compromised accounts of staff of the event firm,” the SSU mentioned, corroborating prior disclosure from the Ukraine CERT group.
The disclosure comes days after Microsoft warned of a malware operation aimed toward authorities, non-profit, and knowledge expertise entities in Ukraine, attributing the assaults to a risk cluster codenamed “DEV-0586.”
“The attackers corrupted MBR data (the service info on the media required to entry the info) on particular person servers and consumer computer systems. Furthermore, this is applicable to each working methods working Home windows and Linux.”
The Ukrainian Cyber Police, for its half, famous that it is investigating a mix of three intrusion vectors that had been probably used to drag off the assaults — provide chain assault concentrating on an IT agency which manages web sites for the Ukrainian authorities, exploitation of the flaw in October CMS, and Log4j vulnerabilities.
What’s extra, the IT agency referenced by Microsoft, Kitsoft, confirmed on Fb it had been hit with the WhisperGate malware. “The present state of affairs is not only about hacking web sites, it’s an assault aimed toward sowing panic and worry, destabilizing the nation from inside,” the corporate mentioned.
Whereas neither the Cyber Police nor the SSU attributed the defacements and the damaging malware assaults to any risk group or state-sponsored actor, the Ukrainian Ministry of Digital Transformation pointed fingers at Russia, accusing the nation of making an attempt to “wage a hybrid warfare.”
[ad_2]
