29/06/2017
A massive new ransomware attack that started in Ukraine is spreading across Europe and the United States, according to Reuters and multiple other sources.
The ransomware appears to be related to the Petya family, which is currently detected by ESET (anti-virus software) as Win32/Diskcoder.C Trojan.
Users & customers can contact our specialist team to ensure the highest level of protection against this threat at [email protected] / 071 656 8467.
It is essential you have a software security product with network detection that'll protect against the SMB spreading mechanism proactively.
ESET researchers have located the point from which this global epidemic has all started. Attackers have successfully compromised the accounting software M.E.Doc, popular across various industries in Ukraine, including financial institutions. Several of them executed a trojanized update of M.E.Doc, which allowed attackers to launch the massive ransomware campaign today which spread across the whole country and to the whole world. M.E.Doc has today released a warning on their website.
How does Petya work?
The Petya malware attacks a computer’s MBR (master boot record), a key part of the startup system that contains information about the hard disk partitions and helps load the operating system. If the malware successfully infects the MBR, it will encrypt the whole drive itself. Otherwise, it encrypts all files, like Mischa.
***The outbreak is spreading quickly, even after previous outbreaks have generated headlines and most vulnerabilities should have been patched. It only takes one un-patched computer to get inside the network. From there, the malware can take over administrator rights and spread to other computers.***
How to protect yourself
• Use reliable anti-malware software: This is a basic but critical component. Just because it’s a server, and it has a firewall, does not mean it does not need anti-malware. It does! Always install a reputable anti-malware program and keep it updated.
• Make sure that you have all current Windows updates and patches installed.
• Run Vulnerability Checks to see whether your Windows machines are patched against exploits, and patch if necessary.
• Perform Product Updates.
Contact our specialist team today to be preventative rather than cure.
