• The CompTIA Cybersecurity Programs Team would like to thank you for an incredible year and wish you a
    Happy 2025!
    CompTIA offices will be closed from December 24, 2024, through January 1, 2025. During this time, the Cybersecurity Programs Team will check the approval queue once daily. Our Platform Partner, IT-ISAC will monitor and respond but will only post items requiring immediate action.
    For urgent matters, please tag Lisa Person or Wayne Selk in the thread.
    **The Cybersecurity Trustmark Cyber Success Calls will resume Jan. 6, 2025.

INFORMATIONAL TLP: Green Russia Creates Its Own TLS Certificate Authority to Bypass Sanctions

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 
Last edited:

INFORMATIONAL TLP: Green Malware Disguised as Security Tool Targets Ukraine's IT Army

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: Low TLP: Green Anonymous Claims to Have Hacked German Subsidiary of Russian Energy Giant Rosneft

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: High TLP: Green Critical Infrastructure Threat as Ransomware Groups Target 'Enemies of Russia’

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

ACTIONABLE Severity: Medium TLP: Amber ‘GraphSteel’ and ‘GrimPlant’ Delivered via Fake Antivirus Updates: Ukrainian Organizations

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: High TLP: Green CaddyWiper: More Destructive Wiper Malware Strikes Ukraine

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL TLP: Green German Government Advises Against Using Kaspersky Antivirus

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

ACTIONABLE Severity: High TLP: Green Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentic

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

ACTIONABLE Severity: High TLP: Amber Major Internet Provider Warding Off Cyber Attacks to Keep Ukrainians Connected

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: Low TLP: Green Russia Uses Deepfake of Zelensky to Spread Disinformation

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

ACTIONABLE Severity: Medium TLP: Green Russian Cyclops Blink Botnet Launches Assault Against Asus Routers

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: Medium TLP: Green Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: High TLP: Amber Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL Severity: Medium EU and US Agencies Warn that Russia Could Attack Satellite Communications Networks

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 
Last edited:

INFORMATIONAL Severity: Low TLP: Green Russia-linked InvisiMole APT Targets State Organizations of Ukraine

Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 
Last edited:

INFORMATIONAL Severity: High TLP: Green U.S. Government Warns Companies of Potential Russian Cyberattacks

Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 
Last edited:

INFORMATIONAL Severity: Low TLP: Green Ukrainian Enterprises Hit with the DoubleZero Wiper

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL TLP: Green U.S. Charges 4 Russian Govt. Employees Over Hacking Critical Infrastructure Worldwide

DHS Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.
 

INFORMATIONAL TLP: Green Russia Facing Internet Outages Due to Equipment Shortage and Loss of IT Talent


Vendor Reports

We are sharing the headline of this report that our cyber analysts have issued. CompTIA ISAO members may click the link to access the full report. Unfortunately, we are unable to share the full report publicly as it may contain protected sources, restricted threat intelligence of analysis that has been created specifically for our members. For more information about the CompTIA ISAO, please click here.