Petya - The new worldwide ransomware attack

Petya - The new worldwide ransomware attack

Written on June 28, 2017 at 10:24 AM By Emily Gam

There has been another major ransomware attack this morning with thousands of computers affected across the globe.

There are already reports of Australian businesses targeted by the attack with law firm DLA Piper and the Cadbury Chocolate factory in Hobart both having their files held to ransom.

The ransomware is very similar to the WannaCry attack only a few weeks ago, with the malicious software locking up computer files and demanding a ransom of $300 in Bitcoin.

Petya - The new worldwide ransomware attack

The origin of the ransomware remains unclear although it appears to have hit Russia and the Ukraine first before spreading across the globe.

The attack is currently being dubbed Petya after the strain of ransomware that experts believe it is based on.

It appears that the malicious software gains access through phishing emails that prompt the user to download infected Word or PDF attachments. After the file is download the ransomware locks all files and the user is presented with a ransom message.

"If you see this text, then your files are no longer accessible, because they are encrypted," the text reads, according to one of the photos. "Perhaps you are busy looking for a way to recover your files, but don't waste your time. Nobody can recover your files without our decryption service.”

At the moment there is no clear solution or fix if you are infected with the ransomware, as always the best protection is to remain vigilant, and train your staff to look for red flags in their emails.

The fact that this attack has happened so soon after WannaCry and appears to also utilise vulnerabilities leaked from the National Security Agency (NSA) means that there will be many more ransomware attacks in the future.

Disaster Recovery Plan Template

Recent Posts