Multiple Petya Ransomware Infections Reported

ronjor · Jun 27, 2017

Original release date: June 27, 2017

Petya ransomware encrypts the master boot records of infected Windows computers, making affected machines unusable. Open-source reports indicate that the ransomware exploits vulnerabilities in Server Message Block (SMB). US-CERT encourages users and administrators to review the US-CERT article on the Microsoft SMBv1 Vulnerability and the Microsoft Security Bulletin MS17-010. For general advice on how to best protect against ransomware infections, review US-CERT Alert TA16-091A. Please report any ransomware incidents to the Internet Crime Complaint Center (IC3).
Click to expand...

Ongoing discussion here. >https://www.wilderssecurity.com/threads/many-firms-hit-by-global-cyber-attacks.395036/

ronjor · Jul 1, 2017

Petya Ransomware

Original release date: July 01, 2017
Description
Based on initial reporting, this Petya campaign involves multiple methods of initial infection and propagation, including exploiting vulnerabilities in Server Message Block (SMB). Microsoft released a security update for the MS17-010 vulnerability on March 14, 2017. Background information on ransomware infections is provided in US-CERT Alert TA16-091A.
Click to expand...

ronjor · Jul 3, 2017

Petya Malware Variant

Original release date: June 30, 2017 | Last revised: July 03, 2017
Cybersecurity researchers have been aware of the Petya malware since 2016 and have recently identified a new enhanced variant with several different names, including “NotPetya,” “Petrwrap,” “GoldenEye,” and “Nyetya.” Current reporting suggests that the initial infection vector for the Petya variant may be the result of a supply chain attack against accounting software MEDoc.
Click to expand...

ronjor · Jul 5, 2017

Petya Malware Variant (Update B)

Original release date: June 30, 2017 | Last revised: July 05, 2017
SUMMARY
This updated alert is a follow-up to the updated alert titled ICS-ALERT-17-181-01A Petya Ransomware Variant that was published July 3, 2017, on the NCCIC/ICS-CERT web site.
Click to expand...

JRViejo · Jul 9, 2017

In a surprising turn of events, Petya and all of its variants are no longer an actual threat to computer users. The developer released the master decryption key. It is unclear why Janus Cybercrime Solutions decided to do this, as Petya and its variants have been widely successful over the past few years.

The master decryption key can be used to decrypt all three existing Petya Strains. This includes the Mischa and GoldenEye ransomware, both of which use the exact same code base as Petya. These latter two are also evolutions of the original malware, with new features added on top and other small code changes. Sadly, this key will not work for the NotPetya strain, since that one is not developed by Janus Cybercrime Solutions.
Click to expand...

Original Petya Developer Releases Master Decryption Key for all Variants by JP Buntinx.

ronjor · Jul 10, 2017

Petya Malware Variant (Update C)

Original release date: June 30, 2017 | Last revised: July 10, 2017
SUMMARY
This updated alert is a follow-up to the updated alert titled ICS-ALERT-17-181-01B Petya Malware Variant that was published July 5, 2017, on the NCCIC/ICS-CERT web site.
US-CERT released the following documents that contain in-depth technical analysis on the Petya malware, as well as indicators of compromise and additional recommendations for mitigation. These documents are available via the following links:
Click to expand...

ronjor · Jul 28, 2017

Petya Ransomware Updated

Original release date: July 01, 2017 | Last revised: July 28, 2017
Overview

This Alert has been updated to reflect the National Cybersecurity and Communications Integration Center's (NCCIC) analysis of the "NotPetya" malware variant.

The scope of this Alert’s analysis is limited to the newest Petya malware variant that surfaced on June 27, 2017. This malware is referred to as “NotPetya” throughout this Alert.
Click to expand...

ronjor · Dec 22, 2017

NotPetya’s Cost to FedEx: $400 Million and counting

December 22, 2017 10:22 by Paul
As Federal Express continues to recover from the devastating NotPetya malware outbreak, the cost of the attack on the company continues to grow, topping $400 million in just the last six months.
Click to expand...

Log in or Sign up

Multiple Petya Ransomware Infections Reported

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Multiple Petya Ransomware Infections Reported

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

JRViejo Super Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches