Malware

ESET detailed two additional malware components used in last week's HermeticWiper attacks against Ukraine, as well as an additional wiper deployed elsewhere in Ukraine at the same time.

Dubbed "FoxBlade" by Microsoft, the software giant immediately alerted the Ukrainian government upon discovering the malware. Also, definitions were added to Microsoft Defender within three hours of discovery.

Daxin operates as a Windows kernel driver and is designed "optimized" for the use of single external command, to hop from infected system to infected system on a single network with varying security measures put in place.

The Cybersecurity and Infrastructure Security Agency and the FBI issued a joint alert Saturday warning that the two wiper strains that attacked Ukrainian enterprises in the run-up to Russia's invasion of the country could affect United States businesses. The agencies urged preparedness.

TrickBot, a longtime financial malware, has again come to the fore, targeting large U.S. financial institutions, including Bank of America and Wells Fargo & Co.

The American Hospital Association and the Department of Health and Human Services Cybersecurity Coordination Center urge U.S. healthcare providers to be on alert and implement mitigation strategies as there is a direct and indirect threat posed to critical infrastructure.

Attackers dropping HermeticWiper, the wiper malware spread in the Ukraine immediately before Russia’s invasion Wednesday, may have used ransomware as a decoy, according to Broadcom’s Symantec threat researchers.