Malware
DesertBlade
According to Microsoft, this was used in a limited destructive malware attack in early March 2022 impacting a single Ukrainian entity.
According to Microsoft, this was used in a limited destructive malware attack in early March 2022 impacting a single Ukrainian entity. DesertBlade is responsible for iteratively overwriting and then deleting overwritten files on all accessible drives (sparing the system if it is a domain controller).
Family metadata imported from Malpedia (Fraunhofer FKIE).