WhisperGate

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Destructive malware deployed against targets in Ukraine in January 2022.

Threat Analysis

WhisperGate is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://malpedia.caad.fkie.fraunhofer.de/details/win.whispergate

→https://www.cadosecurity.com/resources-for-dfir-professionals-responding-to-whispergate-malware/

→https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

win.whispergatePAYWIPEWhisperGate

External Intelligence

Malpedia: win.whispergate

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search WhisperGate