Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search

 

Petya ransomware impacting large organisations

Petya ransomware impacting large organisations in multiple countries.


This new strain of the Petya ransomware started propagating on June 27, 2017, infecting many organisations. Similar to WannaCry, Petya uses the Eternal Blue exploit to propagate itself.

What is Petya?

Petya has been in existence since 2016. It differs from typical ransomware as it doesn’t just encrypt files, it also overwrites and encrypts the master boot record (MBR).

In this latest attack, the following ransom note is displayed on infected machines, demanding that $300 in bitcoins be paid to recover files:

How does Petya spread and infect computers?

Petya propagates itself by exploiting the MS17-010 vulnerability, also known as Eternal Blue. Symantec continues to investigate other possible methods of propagation.

Who is impacted?

At time of writing, Petya is primarily impacting organisations in Europe.

Is this a targeted attack?

It’s unclear at this time, however, previous strains of Petya have been used in targeted attacks against organisations.

Am I protected from the Petya Ransomware?

Symantec Endpoint Protection (SEP) and Norton products proactively protect customers against attempts to spread Petya using Eternal Blue. SONAR behavior detection technology also proactively protects against Petya infections. Symantec products also detect Petya components asRansom.Petya.

What are the details of Symantec's protection?

Network-based protection
Symantec has the following IPS protection in place to block attempts to exploit the MS17-010 vulnerability:

OS Attack: Microsoft SMB MS17-010 Disclosure Attempt (released May 2, 2017)

Attack: Shellcode Download Activity (released April 24, 2017)

Antivirus

Ransom.Petya

Symantec is continuing to analyze this threat and will post further information as soon as it becomes available.


ends

© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

Budget Policy Statement: 'Wellbeing Of NZers At The Heart Of Budget Priorities'

“We want a wellbeing focus to drive the decisions we make about Government policies and Budget initiatives. This means looking beyond traditional measures - such as GDP - to a wider set of indicators of success,” Grant Robertson said. More>>

ALSO:

Short Of 2017 Record: Insurers Pay $226m Over Extreme Weather

Insurers have spent more than $226 million this year helping customers recover from extreme weather, according to data from the Insurance Council of NZ (ICNZ). More>>

Environment Commissioner: Transparent Overseer Needed To Regulate Water Quality

Overseer was originally developed as a farm management tool to calculate nutrient loss but is increasingly being used by councils in regulation... “Confidence in Overseer can only be improved by opening up its workings to greater scrutiny.” More>>

ALSO:

Deal Now Reached: Air NZ Workers Vote To Strike

Last week union members voted overwhelmingly in favour of industrial action in response to the company’s low offer and requests for cuts to sick leave and overtime. More>>

ALSO: