London/Dubai — Microsoft, cybersecurity analysts and Ukrainian police say the global hack that has disrupted companies across the globe can be traced to a Ukrainian accounting software producer called M.E.Doc. The cybercrime unit of the Ukrainian police said late on Tuesday that a software upgrade from M.E.Doc unwittingly contained the virus. Microsoft said in a blog post that the initial infection "appears to involve a software supply-chain threat involving the Ukrainian company M.E.Doc", and that it has evidence that some active infections started from the software maker’s updates. "One infection vector used in this campaign was the M.E.Doc software," John Miller, senior manager at cybersecurity firm FireEye, said in an e-mail. Aleks Gostev, Kaspersky Lab’s chief security expert, also said M.E.Doc appeared to be the source of the malware. M.E.Doc did not respond to requests for comment. In a Facebook post M.E.Doc said "major anti-virus companies" had vetted its software and that i...

Subscribe now to unlock this article.

Support BusinessLIVE’s award-winning journalism for R129 per month (digital access only).

There’s never been a more important time to support independent journalism in SA. Our subscription packages now offer an ad-free experience for readers.

Cancel anytime.

Would you like to comment on this article?
Sign up (it's quick and free) or sign in now.

Speech Bubbles

Please read our Comment Policy before commenting.