Operation Bleeding Bear
ID: 6b6a8ced-b11f-5875-9175-0b2c53f320aa
STIX ID: report--6b6a8ced-b11f-5875-9175-0b2c53f320aa
Feed Name: Elastic Security Labs
Threat Score
Elastic Security analyzes WhisperGate (Operation Bleeding Bear), a multi-stage destructive campaign targeting Ukrainian organizations that uses an MBR wiper, a Discord-hosted downloader/injector, and a file-corrupting payload; the report provides technical details, TTPs, hashes/IOCs, and detection/prevention guidance demonstrating Elastic's ability to block each stage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.