The US Department of Justice has announced charges against a Russian national for his alleged role in a series of disruptive cyberattacks against Ukraine ahead of Russia’s full-scale invasion in February 2022.

The individual, Amin Timovich Stigal, is believed to be a member of Cadet Blizzard, a state-sponsored threat actor also known as DEV-0586 and Ruinous Ursa, which operates on behalf of Russia’s military intelligence (the Main Intelligence Directorate of the General Staff (GRU) of Russia).

This article references that:

Amin Stigal, an alleged civilian co-conspirator, who was indicted in June for his role in WhisperGate activities

Not sure if that's what you're referring to.

[–] NaibofTabr@infosec.pub 5 points 2 months ago (1 children)

No, I meant this is how the NotPetya incident occurred.

[–] tal 7 points 2 months ago* (last edited 2 months ago)

Oh, like, similar incident also attacking master boot records?

Yeah, I guess.

EDIT: Those guys apparently got identified and charged back in 2020:

https://www.justice.gov/opa/pr/six-russian-gru-officers-charged-connection-worldwide-deployment-destructive-malware-and

Also GRU.