• Language chooser
    • USA (English)
    • France (Français)

Prestige Ransomware

Released: Oct 18, 2022


Medium Severity

Ransomware Type


Targeting organizations in Ukraine and Poland

Researchers at Microsoft Threat Intelligence Center (MSTIC) have identified evidence of a novel ransomware campaign targeting organizations in the transportation and logistics industries in Ukraine and Poland. According to the report, the new ransomware labels itself with a ransom note of “Prestige ranusomeware”. Learn More »

Background

Prestige Ransomware has similar deployment techniques as previously used in recent destructive attacks leveraging AprilAxe (ArguePatch)/CaddyWiper or Foxblade (HermeticWiper).

Latest Development

Recent news and incidents related to cybersecurity threats encompassing various events such as data breaches, cyber-attacks, security incidents, and vulnerabilities discovered.


FortiGuard has Antivirus detection coverage on the malware as W32/Filecoder.OMM!tr.ransom. The ANN and Sandbox behavioural detection engine detects the malware as high risk.


October 14, 2022, Microsoft Security released a blog: https://www.microsoft.com/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/

FortiGuard Cybersecurity Framework

Mitigate security threats and vulnerabilities by leveraging the range of FortiGuard Services.


PROTECT
  • Decoy VM

  • AV

  • AV (Pre-filter)

  • Behavior Detection

  • ANN

  • Web Filter

  • Web Filter

  • Anti-ransomware

  • Botnet C&C

DETECT
  • Threat Hunting

  • IOC

  • Outbreak Detection

  • Content Update

RESPOND
  • Automated Response

  • Assisted Response Services

RECOVER
  • InfoSec Services

IDENTIFY
  • Attack Surface Monitoring (Inside & Outside)

Threat Intelligence

Information gathered from analyzing ongoing cybersecurity events including threat actors, their tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), malware and related vulnerabilities.