Microsoft says cyberattacks targeting Ukraine 'raise serious concerns' under Geneva Convention

CNN vis MSN ^ | 1 March 2022 | Brian Fung

[Erik Latranyi]

As hacking by nation-states has grown more pervasive in recent years, Microsoft has long called for the creation of a new Geneva Convention governing cyberspace.

But now, for the first time, the tech giant appears to be suggesting that cyberattacks tied to the war in Ukraine could potentially be considered war crimes under existing international law.

On Monday, Microsoft (MSFT) said that in the hours leading up to Russia's invasion, it detected a new form of "offensive and destructive" software targeting Ukrainian institutions. Microsoft also said it has observed a barrage of cyberattacks zeroing in on Ukraine's agricultural, commercial, finance and energy sectors.

"These attacks on civilian targets raise serious concerns under the Geneva Convention, and we have shared information with the Ukrainian government about each of them," wrote Microsoft president Brad Smith in a blog post.

Microsoft's underlying message? The years-long ethical debate surrounding cyberwar — and its impact on civilians — is no longer theoretical. It is here, it is real, and governments must figure out how to respond. (Microsoft declined to comment on whether it believes the hacks constitute actual breaches of the Geneva Convention.)

In 2017, Smith argued that the rise of transnational digital crime and the brazen Sony data breach attributed to North Korea showed how cyberspace "has become a potential new and global battleground."

[minnesota_bound]

How is Microsoft following all of this?
Is Windows spyware for Microsoft?