Federal Agencies Issue Cybersecurity Advisory Amid Russia’s Attack on Ukraine

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Feb.26 published a co-operative cybersecurity advisory providing a summary of damaging malware that has been used to target Ukrainian organizations, along with direction on how organizations can detect and ensure privacy, protection, and safety of their networks.

Organizations, following the declaration of this advisory titled “Destructive Malware Targeting Organizations in Ukraine,” are recommended to evaluate and reinforce their cybersecurity stance against these destructive malware that could affect the accessibility of critical data and assets. Moreover, the FBI and CISA have requested organizations to carry out multi factor authentication, establish antivirus and antimalware programs to carry out regular scans, update software, filter network traffic and permit robust spam filters to stop phishing email from reaching end users, among other measures.

The constant denial of services and damaging malware attacks affecting Ukraine and other countries in the region, has led CISA and its associates to identify and promptly share intelligence about malware that could theoretically threaten the operations of critical infrastructure in the US. The FBI continues to see malevolent cyber activity that is targeting the U.S. infrastructure sector and are determined to unsettle and lessen the impact of these threats.

The agencies are encouraging executives and senior leaders to review the advisory and take up a number of actions including the evaluation of their environment for uncharacteristic channels for malware delivery and/or spread through their systems, implement common strategies, and ensure relevant contingency arrangements in the occurrence of a cyberattack.

In an attempt to help organizations CISA has updated the Shield Up webpage to include new services and resources and recommendations for senior leaders and procedures to safeguard critical assets.