Palo Alto Networks is closely monitoring the rapidly evolving cyber activity related to Russia and Ukraine. We continue to release new Unit 42® threat intelligence, deploy protections for our customers, and are actively collaborating with our partners in industry and governments to share our analysis and findings based on our global threat network.
Protecting our customers is our highest priority. In line with warnings by multiple governments, we are also diligently preparing for any cyberattacks that may spread beyond Ukraine. We will continuously update this resource center with the latest cybersecurity information including research, best practices, mitigations, and threat intelligence from the Unit 42 blog. We are standing by and ready to assist our customers as needed.
Domains
Binaries
IPs
URLs
There is no way to know for certain what shape an attack may take, but taking these steps will help provide broad protection against what we expect to come.
Apply patches for any software containing vulnerabilities – not just those known to be exploited in the wild. This is most urgent for software that is internet-facing and necessary for your business’s operations, such as webmail, VPNs and other remote access solutions.
A likely form of disruptive cyberattack will use either ransomware or a destructive attack that poses as ransomware.
Ensure that you designate points of contact across your organization in key areas in case of a cybersecurity incident or disruption of critical infrastructure.
Making small policy changes can decrease the likelihood of a successful attack against your network. In addition, run scans if you can for early indicators of compromise (IoCs), decrease the time between security updates, and perform a gap analysis across major threat vectors to define areas that require alert prioritization.
Our research indicates that recent attacks have used ransomware or a destructive attack that poses as ransomware (i.e., WhisperGate).
Palo Alto Networks provides a full portfolio of products and threat intelligence, and we’ve reinforced relevant capabilities:
