Malware News New PathWiper data wiper malware hits critical infrastructure in Ukraine

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
7,931
A new data wiper malware named 'PathWiper' is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country.

The payload was deployed through a legitimate endpoint administration tool, indicating that attackers had achieved administrative access to the system through a prior compromise.

Cisco Talos researchers who discovered the attack attributed it with high confidence to a Russia-linked advanced persistent threat (APT).

The researchers compare PathWiper to HermeticWiper, previously deployed in Ukraine by the 'Sandworm' threat group, which had similar functionality.

Hence, PathWiper may be an evolution of HermeticWiper, used in attacks by the same or overlapping threat clusters.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top