New Data-Wiping Malware Discovered on Systems in Ukraine
Researchers were scrambling to analyze a newly discovered piece of data-wiping malware found in the wild.
![Photo of Ukraine national flag. Photo of Ukraine national flag.](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt00f542270ce6fbb5/64f177635d2bd2d42d862d75/UkraineFlag_PeterTreanor_Alamy.jpeg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
This is a developing story and will be updated as it evolves.
That's the sound of the first shoe dropping — or the first bit of destructive malware, anyway: Researchers at ESET today reported their discovery of new data-wiping malware on hundreds of systems in Ukraine that in at least one case infiltrated the victim's Microsoft Active Directory server. The reports came as the US government has continued its crescendo of warnings to US organizations to prepare for major cyberattacks out of Russia amid its potential invasion of Ukraine and possible retaliation for US economic sanctions on Russia.
"The wiper abuses legitimate drivers from the EaseUS Partition Master software in order to corrupt data. As a final step the wiper [reboots the] computer," ESET said in a tweet. The EaseUS Partition Master is a disk management tool.
"The Wiper binary is signed using a code signing certificate issued to Hermetica Digital Ltd," according to ESET.
The attack may have been in the works for two months, according to time-stamp information on one of the samples. ESET said the wiper follows DDoS attacks on multiple Ukrainian websites today.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024