Symantec has confirmed that MEDoc, a tax and accounting software package, is used for the initial insertion of Petya into corporate networks. MEDoc is accounting software that is widely used in the Ukraine, indicating that organizations in that country were the…
Symantec comments on Petya Ransomware Attacks
A new strain of Petya ransomware has struck Europe and is spreading around the world, affecting many organizations. Symantec has confirmed that the Petya ransomware, like WannaCry, is using an EternalBlue exploit to spread, and has published an update on its blog, including…
Petya ransomware: What we know, and the rise of Ransomware-as-a-service (RaaS)
The Petya variant of ransomware utilizes a similar, if not somewhat modified, version of EternalBlue exploit—as used by the Wannacry ransomware in May this year—to spread to all active end-points on the affected network. What is Petya, and how does…