Ukraine Crisis Resource Center
Get 90 days of SentinelOne Singularity access free of charge.
Protecting Against HermeticWiper
On February 23rd, the threat intelligence community began observing a new wiper malware sample circulating in Ukrainian organizations. Our analysis shows it is a Wiper that is using a signed driver. The wiper targets Windows devices by deleting shadow copies and manipulating MBR after rebooting. See how SentinelOne protects and detects HermeticWiper.
AcidRain | A Modem Wiper Rains Down on Europe
Spillover from this attack rendered 5,800 Enercon wind turbines in Germany unable to communicate for remote monitoring or control. SentinelLabs researchers discovered new malware that we named ‘AcidRain’ - an ELF MIPS malware designed to wipe modems and routers. AcidRain is the 7th wiper malware associated with the Russian invasion of Ukraine.
Viasat confirmed the use of the AcidRain wiper in the February 24th attack against their modems.
Protecting Against PartyTicket
On February 24th, 2022, we saw a new Go ransomware being used as a decoy alongside the deployment of HermeticWiper. During our analysis, we decided to name it PartyTicket based on some of the strings used by the malware developers. See how SentinelOne protects and detects PartyTicket.
Ukraine Crisis Cyber
Response Includes:
- Protection for Every Device. Centrally manage and protect every kind of computing device across Windows, Mac, Linux, and mobile operating systems, with no connectivity or network dependency. Singularity Complete delivers battle-tested cyberdefense.
- Managed Detection and Response. Our team of military-grade cyber experts will monitor and manage your deployment in this heightened time of risk. Vigilance MDR enhances your SOC.
- Instant Deployment. Remotely deploy and configure in seconds with our cloud-native technology.
Additional Resources
Blog
Cyber War Elements In The Ukrainian Conflict
Cyber security’s most distinguished speakers discuss the current situation around the Ukrainian conflict. Where is the cyberwar? And where are all the APTs?
Hosted by the Johns Hopkins SAIS Alperovitch Institute for Cybersecurity Studies.
CISA | Alert (AA22-057A)
Destructive Malware Targeting Organizations in Ukraine
Leading up to Russia’s unprovoked attack against Ukraine, threat actors deployed destructive malware against organizations in Ukraine to destroy computer systems and render them inoperable.
Blog
HermeticWiper | New Destructive Malware Used In Cyber Attacks on Ukraine
Read more about the technical details of the malware, dubbed HermeticWiper, including IOCs and STAR rules to allow organizations to stay protected from this attack.