Eric Geller

@ericgeller ↗

Deleted No

Hibernated Yes

Last Checked Nov. 18, 2022

Created

Thu Feb 24 01:27:44 +0000 2022

Likes

Retweets

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available

Eric Geller @ericgeller

Guerrero-Saade likened #HermeticWiper to Shamoon (Saudi Aramco hack) and Destover (Sony hack) in that it deploys and abuses a driver for a legitimate program (in this case, EaseUS Partition Manager) to bypass the normal obstacles to deep hard-drive control that malware faces. — PolitiTweet.org

Posted Feb. 24, 2022 Hibernated

Preceded By

Eric Geller @ericgeller

The wiper exploits a Microsoft feature that configures settings across multiple computers on a network, so it's designed for networks where the attacker has that kind of broad access. It's "fire-and-forget," Guerrero-Saade said, compared to WhisperGate, which needed more input. — PolitiTweet.org

Posted Feb. 24, 2022 Hibernated

Followed By

Eric Geller @ericgeller

#HermeticWiper also doesn't appear to work on Windows 10, Guerrero-Saade told me, which is fine for Ukraine, where most computers run older versions of Windows — in many cases, pirated versions. — PolitiTweet.org

Ukraine gov estimates only 40% of their state MS software is pirated (MS estimate 70%). https://t.co/WzDP2qaDNC

Posted Feb. 24, 2022 Hibernated