Initially detailed in October, the Prestige ransomware has been used in attacks against transportation and related logistics organizations in Ukraine and Poland, with some of the victims previously infected with the destructive HermeticWiper malware (FoxBlade).

At the time, Microsoft said that the attacks did not appear to be related to known ransomware campaigns, despite the use of development techniques like those used in recent destructive attacks in Ukraine.