Ukraine Crisis Resource Center
Ukraine is fighting to survive against Russian aggression and cyberattacks. Risk for businesses operating in the free world is on the rise.
Get 90 days of SentinelOne Singularity access free of charge.
Get 90 days of SentinelOne Singularity access free of charge.
Protecting Against HermeticWiper
On February 23rd, the threat intelligence community began observing a new wiper malware sample circulating in Ukrainian organizations. Our analysis shows it is a Wiper that is using a signed driver. The wiper targets Windows devices by deleting shadow copies and manipulating MBR after rebooting. See how SentinelOne protects and detects HermeticWiper.
AcidRain | A Modem Wiper Rains Down on Europe
On Thursday, February 24th, 2022, a cyber attack rendered Viasat KA-SAT modems inoperable in Ukraine.
Spillover from this attack rendered 5,800 Enercon wind turbines in Germany unable to communicate for remote monitoring or control. SentinelLabs researchers discovered new malware that we named ‘AcidRain’ - an ELF MIPS malware designed to wipe modems and routers. AcidRain is the 7th wiper malware associated with the Russian invasion of Ukraine.
Viasat confirmed the use of the AcidRain wiper in the February 24th attack against their modems.
Spillover from this attack rendered 5,800 Enercon wind turbines in Germany unable to communicate for remote monitoring or control. SentinelLabs researchers discovered new malware that we named ‘AcidRain’ - an ELF MIPS malware designed to wipe modems and routers. AcidRain is the 7th wiper malware associated with the Russian invasion of Ukraine.
Viasat confirmed the use of the AcidRain wiper in the February 24th attack against their modems.
Protecting Against PartyTicket
On February 24th, 2022, we saw a new Go ransomware being used as a decoy alongside the deployment of HermeticWiper. During our analysis, we decided to name it PartyTicket based on some of the strings used by the malware developers. See how SentinelOne protects and detects PartyTicket.
Ukraine Crisis Cyber
Response Includes:
- Protection for Every Device. Centrally manage and protect every kind of computing device across Windows, Mac, Linux, and mobile operating systems, with no connectivity or network dependency. Singularity Complete delivers battle-tested cyberdefense.
- Managed Detection and Response. Our team of military-grade cyber experts will monitor and manage your deployment in this heightened time of risk. Vigilance MDR enhances your SOC.
- Instant Deployment. Remotely deploy and configure in seconds with our cloud-native technology.