DEV-0586
No sourced public emblem in this profile.
reference profile · reported nexus: RU (not nationality)
MSTIC has not found any notable associations between this observed activity, tracked as DEV-0586, and other known activity groups. MSTIC assesses that the malware (WhisperGate), which is designed to look like ransomware but lacking a ransom recovery mechanism, is intended to be destructive and designed to render targeted devices inoperable rather than to obtain a ransom.
Source-reported aliases: Ruinous Ursa, Cadet Blizzard. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
Ukraine
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://msrc-blog.microsoft.com/2022/02/28/analysis-resources-cyber-threat-activity-ukraine/
https://unit42.paloaltonetworks.com/atoms/ruinousursa/
https://www.microsoft.com/en-us/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/