Concerns/Attacks Related to Geopolitical Tensions between Russia and Ukraine

[MJ Shoer]

INFORMATIONAL TLP: Green Russia Creates Its Own TLS Certificate Authority to Bypass Sanctions​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL TLP: Green Malware Disguised as Security Tool Targets Ukraine's IT Army​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL Severity: Low TLP: Green Anonymous Claims to Have Hacked German Subsidiary of Russian Energy Giant Rosneft​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL Severity: High TLP: Green Critical Infrastructure Threat as Ransomware Groups Target 'Enemies of Russia’​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

ACTIONABLE Severity: Medium TLP: Amber ‘GraphSteel’ and ‘GrimPlant’ Delivered via Fake Antivirus Updates: Ukrainian Organizations​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL Severity: High TLP: Green CaddyWiper: More Destructive Wiper Malware Strikes Ukraine​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL TLP: Green German Government Advises Against Using Kaspersky Antivirus​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

ACTIONABLE Severity: High TLP: Green Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentic​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

ACTIONABLE Severity: High TLP: Amber Major Internet Provider Warding Off Cyber Attacks to Keep Ukrainians Connected​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL Severity: Low TLP: Green Russia Uses Deepfake of Zelensky to Spread Disinformation​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

ACTIONABLE Severity: Medium TLP: Green Russian Cyclops Blink Botnet Launches Assault Against Asus Routers​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

INFORMATIONAL Severity: Medium TLP: Green Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[MJ Shoer]

State-Sponsored Russian Cyber Actors Targeted Energy Sector from 2011 to 2018​

From NCAS Bulletins

 

[MJ Shoer]

INFORMATIONAL Severity: High TLP: Amber Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang​

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL Severity: Medium EU and US Agencies Warn that Russia Could Attack Satellite Communications Networks​

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL Severity: Low TLP: Green Russia-linked InvisiMole APT Targets State Organizations of Ukraine​

Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL Severity: High TLP: Green U.S. Government Warns Companies of Potential Russian Cyberattacks​

Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL Severity: Low TLP: Green Ukrainian Enterprises Hit with the DoubleZero Wiper​

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL TLP: Green U.S. Charges 4 Russian Govt. Employees Over Hacking Critical Infrastructure Worldwide​

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.

 

[Wayne R. Selk]

INFORMATIONAL TLP: Green Russia Facing Internet Outages Due to Equipment Shortage and Loss of IT Talent​

Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.