New ransomware cyberattack using virus similar to WannaCry spreads globally, mainly affecting companies in Russia, Europe and U.S.

Briefing

New ransomware cyberattack using virus similar to WannaCry spreads globally, mainly affecting companies in Russia, Europe and U.S.

August 14, 2017

Briefing

  • Global Cyberattack – Kaspersky Lab reported new cyberattack using ransomware called Petya virus, variation used in WannaCry, spreading globally and has already mounted 2,000 breaches, mainly in Russia, Europe and U.S.
  • Bitcoin as Ransom – Attackers demanding users to pay $300 ransom through Bitcoin to unlock disabled systems
  • Petya Virus – Leverages EternalBlue which exploits Windows operating system susceptibilities, appended with fake Microsoft digital signature to track spread of attack
  • Selected Affected Organizations – Include Kiev government, Rosnet PJSC, WPP Plc., Chernobyl nuclear facility, Antonov, Mondelez, and Nova Poshta

Accelerator

Sector

Information Technology

Organization

Antonov State Company, Kaspersky Lab, Mondelēz International Inc., Poshta, Rosneft Oil Co. PJSC, WPP plc

Source

Original Publication Date

June 27, 2017

Leave a comment