Don’t pay it.įrom the looks of it, NotPetya is a more professional version of WannaCrypt, without the bugs and kill switch. This means there is no way to get your data back by paying the ransom. Posteo, the email provider for the email address you’re supposed to contact in order to get your decryption key, has already disabled the account. NotPetya will also scan your computer for credentials–usernames and passwords–and send them to the hacker’s server.Nobody can recover your files without our decryption service.” Perhaps you are busy looking for a way to recover your files, but don’t waste your time.
The message you’ll see is this: “If you see this text, then your files are no longer accessible because they are encrypted. (The pre-boot encryption is Petya, and the post-boot one is Misha.) If it fails at that, it’ll just go ahead and boot and then encrypt all your files, and demand payment in BitCoin to unlock it. This will prevent your computer from booting altogether. NotPetya will first attempt to encrypt your MFT on your hard drive. So, if you patched during the WannaCrypt attack, you are only half-protected right now. But it can also infect computers through WMIC and PSExec. NotPetya uses a similar exploit as WannaCrypt: the EternalBlue vulnerability that infects computers via SMBv1. For now, that’s what I’ll call it, too.Īll that aside, here are the highlights of what is known (Excerpted from Forbes and MalwareTech): But this malware seems to pack a one-two punch, if not more. People have recognized one aspect of it as a known ransomware called Petya. In fact, the community hasn’t really even settled on a name for it. We are still learning about this new ransomware attack. It even made its way to a hospital in Pittsburgh, PA in the U.S. Then it spread to the rest of Europe and Russia. Early Tuesday morning, reports of ransomware attacks in Ukraine began trickling in. 
Be wary of suspicious email attachments.Use your antivirus software and keep your virus definitions updated.Patch your systems with MS17-010 (and for Pete’s sake, upgrade beyond Windows XP).
0 kommentar(er)
