Hackers attack transport companies in Ukraine, Poland - Microsoft

This is stated in the Microsoft blog.

It is noted that a new type of "Prestige ransomware", which was not previously identified, is affecting organizations in Ukraine and Poland. Attackers attacked a wide range of systems within an hour on October 11.

According to Microsoft, these attacks had several notable features that set them apart from other ransomware the company tracks.  The hacks are very similar to earlier attacks by a Russian government-linked cyber group that disrupted Ukrainian state institutions. At the same time, Microsoft has not yet been able to connect the attacks with any known group.

In addition, the company reports that the "Prestige ransomware" encrypts the victim's data and leaves a ransom note stating that the data can only be unlocked by purchasing a decryption tool. Researchers assume that the hackers stole the necessary credentials earlier and waited for the right moment.