MSTIC has not found any notable associations between this observed activity, tracked as DEV-0586, and other known activity groups. MSTIC assesses that the malware (WhisperGate), which is designed to look like ransomware but lacking a ransom recovery mechanism, is intended to be destructive and designed to render targeted devices inoperable rather than to obtain a ransom.
Also known as
Ruinous Ursa, Cadet Blizzard, EMBER BEAR.
References
Actor metadata imported from Malpedia (Fraunhofer FKIE).