FoxBlade is the name Microsoft gave to a new malware package that its Threat Intelligence Center detected in attacks on Ukraine’s digital infrastructure, a few hours before 24 February 2022. Microsoft advised the Ukrainian government at once, and detection signatures were added to its Defender anti-malware service within three hours.
What is FoxBlade?
A new malware called FoxBlade has been detected by researchers of the Microsoft Threat Intelligence Center, targeting Ukraine’s digital infrastructure.
How did Microsoft respond to FoxBlade?
FoxBlade can, according to Microsoft’s malware entry, perform a number of actions of a malicious actor’s choice on an infected device. Microsoft security researchers informed the Government of Ukraine about the FoxBlade malware and provided technical advice on preventing the malware’s success. Within three hours, the signatures for detecting this new malware were prepared and added to the Defender anti-malware service.
Which other malware targets Ukraine, and how can you protect against it?
FoxBlade is the third malware currently detected and observed to be used in attacks against Ukraine. In addition, two other destructive malware tracked as WhisperGate and HermeticWiper, are used in data erasure attacks against organizations in Ukraine. To be protected from similar malware attacks, it is necessary to keep the systems used up-to-date, make attack surface analysis regularly, and raise awareness of the institution personnel about potential cyber-attacks.