Cybersecurity researchers at the Microsoft Threat Intelligence Center (MSTIC) noted that companies across Ukraine and Poland were hit by two separate attacks: one that deployed a disk cleaning program called HermeticWiper and the other a ransomware called Prestige.

“Despite using similar deployment methods, [Prestige] campaign differs from recent destructive attacks using […] Foxblade (HermeticWiper), which over the past two weeks have affected many critical infrastructure organizations in Ukraine,” the researchers explained.