Russian cyber espionage in 42 countries

Microsoft has released a report illustrating the cyberwar initiated by Russia before the invasion of Ukraine and continued in the following weeks. The document details the digital weapons used by the Kremlin to target local government and businesses. Attacks were also carried out on 42 countries supporting Ukraine. Coordinated Response to Russian Attacks The first Russian cyber attack occurred on February 23 with HermeticWiper, a malware that destroys all data and prevents the operating system from starting. Russian government-funded cybercriminals used similar malware in the following days: WhisperGateHermeticRansom, CaddyWiper, DesertBlade, Industroyer2, IsaacWiper and DoubleZero. Industroyer2 affects industrial control systems and can cause damage not only to machines but also to people. Other attacks aimed to access sensitive information that could be exploited on the battlefield. With the help of Microsoft and other specialized companies, the Ukrainian government has resisted many destructive cyberattacks. For example, Microsoft Defender with cloud protection has detected and blocked the wiper used to target a company. There are many solutions on the market that offer comprehensive endpoint protection (one of the best is Bitdefender GravityZone Business SecurityHowever, Ukraine is not the only target. The Russians hit over 128 organizations in 42 countries. 63% of the attacks occurred against NATO members with a success rate of 29%. Kremlin-funded cybercriminals engaged in cyberespionage mainly against government agencies (49%) Microsoft points out that Russian cyber attacks can only be thwarted through public-private collaboration. Governments, companies, non-governmental organizations and universities must work together to protect critical infrastructure and citizens.This article contains affiliate links: purchases or orders placed through these links will allow our site to receive a commission.

Categories:   Security