YARA rules for Whispergate
6 rules from 3 sources detect Whispergate. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, APT / threat actor.
Family grouping is heuristic: check each rule's description.
Scan files with all Whispergate rulesSearch rules
Detects unknown wiper malware
APT / threat actorSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2022-01-16Detects unknown wiper malware
APT / threat actorSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2022-01-16Detects reversed stage3 related to Ukrainian wiper malware
APT / threat actorSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2022-01-16Detects samples similar to reversed stage3 found in Ukrainian wiper incident named WhisperGate
MalwareSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2022-01-16autogenerated rule brought to you by yara-signator
MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04Detects first stage payload from WhisperGate
MalwareCado Security (via Open-Source-YARA-rules)· mmuir@cadosecurity.com· 2022-01-17