The RecordPublished
Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs
By Jonathan Greig
Excerpt
Microsoft said it took down a critical service that helped cybercriminals slip through defenses by making malware look like legitimate software.
The company unsealed a legal case in U.S. District Court on Tuesday detailing the disruption of Fox Tempest — a popular service that has operated since May 2025 and provides cybercriminals with code signing tools.
The group abused Microsoft’s Artifact Signing, which is designed to verify that software is legitimate and hasn’t been tampered with.
Steven Masada, assistant general counsel at Mic…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by The Record on therecord.media.
Mentioned in the excerpt
More from The Record6
- Hackers claim breach of Russian election systems days before parliamentary voteThe Record · Published 17 Sep
- City of Liege, Belgium hit by ransomwareThe Record · Published 17 Dec 2022
- Amazon-owned Ring denies ‘ransomware event’ following darknet listingThe Record · Published 14 Mar 2023
- Finland says it found NSO's Pegasus spyware on diplomats' phonesThe Record · Published 17 Jan 2023
On the same topics
- Ragnar LoaderPRODAFT · Added 18 Oct
- Netwalker malware: What it is, how it works and how to prevent itInfosec Institute · Published 29 Jul 2020
- How CrowdStrike Analyzes macOS Malware to Optimize Automated DetectionCrowdStrike · Published 6 May 2022
- Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomwareMicrosoft · Published 19 May
