EternalPetya and the lost Salsa20 key

The latest Petya seems to be broken on purpose: the victims’ keys are lost forever.
Categories:
Malware
Threat analysis
Tags: EternalPetyagoldeneyepetyaPetya ransomwareransomwareWanaCrypt0rWannaCryWannaCrypt

(Read more…)

The post EternalPetya an… Continue reading EternalPetya and the lost Salsa20 key

The next frontier of cyber governance: Achieving resilience in the wake of NotPetya

Earlier this week, several European nations experienced a widespread ransomware attack. Major international giants, such as Merck, WPP, Rosneft, and AP Moller-Maersk, alongside financial institutions, banks, energy companies and more were affected, where users were locked out of computers. The focus of the attack was Europe, but it was also discovered that DLA Piper, a massive U.S. headquartered law firm, was hit by this new strain of ransomware. First reports attributed the attack to the … More Continue reading The next frontier of cyber governance: Achieving resilience in the wake of NotPetya

Smashing Security #031: Petya (don’t know the name of this ransomware)

Another major ransomware outbreak rattles the world – but no-one can decide what it’s called, the danger posed to driverless cars by kangaroos, and do you really want an Amazon Echo Show?
All this and more is discussed in the latest edition of the “Sma… Continue reading Smashing Security #031: Petya (don’t know the name of this ransomware)

ExPetr/Petya/NotPetya is a Wiper, Not Ransomware

After an analysis of the encryption routine of the malware used in the Petya/ExPetr attacks, we have confirmed that the threat actor cannot decrypt victims’ disk, even if a payment was made. This supports the theory that this malware campaign was not designed as a ransomware attack for financial gain. Instead, it appears it was designed as a wiper pretending to be ransomware. Continue reading ExPetr/Petya/NotPetya is a Wiper, Not Ransomware

NotPetya Ransomeware Wreaking Havoc

The latest splash has been made by the Petya or NotPetya Ransomware that exploded in Ukraine and is infecting companies all over the World. It’s getting some people in deep trouble as there’s no way to recover the files once encrypted. The malware seems to be trying to hide it’s intent as it doesn’t really […]

The post NotPetya Ransomeware…

Read the full post at darknet.org.uk

Continue reading NotPetya Ransomeware Wreaking Havoc

NotPetya outbreak: What we know so far

Tuesday’s ransomware outbreak hit many businesses and government entities around the world, but by far the most numerous victims are located in Ukraine. The infection process The delivered malware was not, as initially believed, the original Petya ransomware or the previously seen variant PetrWrap. NotPetya, as this new threat was dubbed, is definitely made to look like Petya, and uses some of its code, but has its own specific characteristics: According to Kaspersky Lab researchers, … More Continue reading NotPetya outbreak: What we know so far