Microsoft Discovered Malware Sent to Ukraine Hours Before Russian Invasion

plat

Level 29
Thread author
Top Poster
Sep 13, 2018
1,793
Excerpt from article:

Microsoft says it found a new malware package -- which it calls "FoxBlade" -- hours before Russia began its invasion of Ukraine on February 24.

In a blog post, Microsoft president Brad Smith said it was coordinating its efforts to protect users in Ukraine with the Ukrainian government, the European Union, European nations, the US government, NATO, and the United Nations.



"Several hours before the launch of missiles or movement of tanks on February 24, Microsoft's Threat Intelligence Center (MSTIC) detected a new round of offensive and destructive cyberattacks directed against Ukraine's digital infrastructure. We immediately advised the Ukrainian government about the situation, including our identification of the use of a new malware package (which we denominated FoxBlade), and provided technical advice on steps to prevent the malware's success," Smith said.

"In recent days, we have provided threat intelligence and defensive suggestions to Ukrainian officials... This work is ongoing."

Smith noted that the cyberattacks on Ukraine seen by Microsoft have been extremely targeted and not as wide-ranging as the 2017 NotPetya attack.

But Smith said Microsoft has seen recent cyberattacks on "Ukrainian civilian digital targets, including the financial sector, agriculture sector, emergency response services, humanitarian aid efforts, and energy sector organizations and enterprises."

Microsoft has also told Ukraine's government about efforts to steal data from government sources, including healthcare information, insurance data, transportation data, and other personally identifiable information.

In addition to its efforts to help Ukraine with cybersecurity measures, Microsoft said it is also taking steps "to reduce the exposure of Russian state propaganda, as well to ensure our own platforms do not inadvertently fund these operations."

"In accordance with the EU's recent decision, the Microsoft Start platform (including MSN.com) will not display any state-sponsored RT and Sputnik content. We are removing RT news apps from our Windows app store and further de-ranking these sites' search results on Bing so that it will only return RT and Sputnik links when a user clearly intends to navigate to those pages," Smith said.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top