The latest ransomware outbreak “Petya” is attacking companies across the globe today, the new variants of ransomware are also known as Petwrap / Petya / NotPetya / Nyetya. Quite a number of companies in Europe and Asia are reporting affected.
From the initial analysis, same as last time ransomware outbreak “WannaCry”, this ransom uses multiple techniques to spread, including one which was addressed by a Windows vulnerability MS17-010 via SMBv1. it was also reported that the ransomware used phishing email to spread. once infected, the machine will spread via local network before it encrypts data on local machine.
All versions of Windows Servers and Clients.
Petya ransomware modifies the master boot records (MBR) and encrypts the Master File Table (MFT) of infected Windows computers, making affected machines unusable.
Until now, there is NO effective method to decrypt all the kidnapped files.
Note: these are good security defense-in-depth recommendations for prevention of being infected, but these steps alone do not guarantee against infection.
Since Petya will start data encryption after system reboot, if user found their Windows hang suddenly and reboot (like the screen below), they should:
Note : Once the encryption process is completed, the data will be unrecoverable.
Please visit here for more Information Security tips.
Created on: 28 Jun 2017
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
|cookielawinfo-checkbox-analytics||11 months||This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".|
|cookielawinfo-checkbox-functional||11 months||The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".|
|cookielawinfo-checkbox-necessary||11 months||This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".|
|cookielawinfo-checkbox-others||11 months||This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.|
|cookielawinfo-checkbox-performance||11 months||This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".|
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.