Russian Military Cyber Actors Target US and Global Critical Infrastructure
ID: 5c491d42-d6f9-5033-8280-2e621cb23360
STIX ID: report--5c491d42-d6f9-5033-8280-2e621cb23360
Feed Name: CISA Cybersecurity Advisories
This joint FBI/CISA/NSA advisory attributes extensive cyber operations to Russian GRU Unit 29155 (Unit 29155 cyber component), describing reconnaissance, exploitation of internet-facing systems, lateral movement, data exfiltration, and deployment of destructive WhisperGate malware (two-stage MBR-corrupting payloads) against Ukrainian and other international targets; it includes detailed TTPs mapped to MITRE ATT&CK, malware static/behavioral analysis, IOCs (IP addresses, file hashes, domains), and prioritized mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
