Proofpoint is Closely Monitoring the Rapidly Evolving Threat Landscape Related to Ukraine and Russia

Proofpoint stands for the defense of peace and human rights, and a diplomatic resolution to the fighting in Ukraine. We continue to monitor the activity of threat actors actively involved with, seeking to influence, or trying to profit from the conflict, and are releasing these findings continuously for the benefit of defenders globally. 

A full timeline of Russian nation state-aligned activity is below.  

We’ve also recently published research detailing compromised Ukrainian military accounts targeting NATO governments (likely conducted by a Belarussian state-aligned actor), Russian infrastructure conducting password spray attacks, and have released Emerging Threats signatures for the wiper malware first detected by ESET. We will continue monitoring and updating our blog as new information comes in. 

• Asylum Ambuscade: State Actor Uses Compromised Private Ukrainian Military Emails to Target European Governments and Refugee Movement

• Cloud Credential Compromise Campaign Originating from Russian-Affiliated Infrastructure

• The Good, the Bad, and the Web Bug: TA416 Increases Operational Tempo Against European Governments as Conflict in Ukraine Escalates

• Mobile Malware is Surging in Europe: A Look at the Biggest Threats

How Proofpoint Can Help 

Proofpoint protects organizations’ biggest risks and greatest assets: their people. If you're interested in learning more about our world-class cybersecurity platforms, please contact us and we’ll be in touch as soon as possible.