On January 26, 2022, Computer Emergency Response Team of Ukraine (CERT-UA) released a report stating that between January 13th and 14th multiple websites of state organizations were tampered with by Russia, resulting in content alteration and system destruction. The attack, now known as WhisperGate, gained access through the supply chain, and through the abuse of the vulnerabilities OctoberCMS and Log4j. The malware itself is made up of three components: BootPatch, WhisperGate, and WhisperKill. Similar to the WhisperGate attacks, on February 23, 2022, ESET and Broadcom’s Symantec discovered a second data wiper malware. This malware, dubbed HermeticWiper (KillDisk.NCV), has been used to target hundreds of additional machines. HermeticWiper is a custom application designed to wipe local data, as well as damage the master boot record of the hard drive, preventing the system from booting into the operating system, which is nearly identical to how the BootPatch section of the WhisperGate attack works. At the time of publication, HermeticWiper has been seen primarily in Ukraine, but data wiping attacks in Latvia and Lithuania have also been identified. The United Kingdom and United States governments have also identified Cyclops Blink, a new malware from Sandworm (a Russian military cyber unit) that would allow for threat actors to gain remote access to networks and utilize the affected networks as a part of Distributed Denial of Service (DDoS) attacks.