TTPs used by DEV-0586 APT Group in WhisperGate Attack Targeting Ukraine

On January 15, 2021, Microsoft Threat Intelligence Center (MSTIC) published a blog post stating that nation-state threat group DEV-0586 has been conducting destructive malware operations on Ukrainian organizations. In this blog, we share information about the simulation and mitigation of these malware attacks to help the cybersecurity community.

WhisperGate Wiper Malware

WhisperGate is a two-stage wiper malware that misrepresents itself as ransomware. The initial access stage for the malware is unknown at the moment. However, it is suspected to be …

apt article attack dev-0586 targeting threat library updates ttps ukraine whispergate