Microsoft President and Vice Chair Brad Smith confirmed a number of destructive cyberattacks directed at Ukraine's digital infrastructure several hours before Russian forces invaded on Feb. 24. Now, the company remains concerned about recent cyberattacks on Ukrainian civilian digital targets in several sectors and emergency services.
In the blog post (opens in new tab), Smith states Microsoft's Threat Intelligence Center (MSTIC) identified a malware package, known as FoxBlade, and notified the Ukrainian government before the invasion. Within three hours, the company mitigated the threat by providing technical advice, along with writing and adding new signatures to detect the malware to its anti-malware service, Microsoft Defender.
However, Microsoft has also seen a rise in recent cyberattacks against Ukraine's financial sector, agriculture sector, emergency response services, humanitarian aid efforts, and energy sector organizations and enterprises.
"These attacks on civilian targets raise serious concerns under the Geneva Convention, and we have shared information with the Ukrainian government about each of them," Smith states. "We have also advised the Ukrainian government about recent cyber efforts to steal a wide range of data, including health, insurance, and transportation-related personally identifiable information (PII), as well as other government data sets."
Ukraine has been a target of cyberattacks over the past few months, with one of the more recent cyberattacks including an expected data wiper attack that disrupted the Ukrainian border control, which slowed refugees leaving Ukraine for Romania (via VentureBeat). This disruption forced officials to use pen and paper instead.
Microsoft is also taking steps in the protection against state-sponsored disinformation campaigns, reducing the exposure of Russian state propaganda by not displaying RT and Sputnik content on the Microsoft Start platform — which includes MSN.com. What's more, RT news apps have been removed from the Windows app store, along with banning all advertisements from RT and Sputnik.
Smith concludes: "Like so many others, we call for the restoration of peace, respect for Ukraine’s sovereignty and the protection of its people. We not only look toward but will work for a future where digital technology is used to protect countries and peoples, helping us all to bring out the best in each other."
For more on the impact of the Russia and Ukraine war, find out how the conflict affects Apple and other tech companies.