Malware on Azure storage

While some blob storage are accessed via public URL what is the best practices or recommendation to prevent malware impacting my storage does Microsoft has any inbuild capabilities or any set of tools that I need to use