Petya Ransomware Update

The new ransomware causing havoc this week is Petya (Petrwrap/GoldenEye). While it is similar to the WannaCry ransomware from last month, there are a few significant differences.First, there is no “kill switch” for this ransomware and hence it is spreading quite rapidly.Second, there seems to be 2 parts to this where the malware first tries to get administrative privileges on the local computer and encrypt the Master Boot Record (MBR) and the Master File Table(MFT) . When this happens successfully, the user is completely locked out of the system. The only resolution will be to re-provision this system from scratch and rely on your backups to recover your data.If the malware is unable to access the MBR, it incorporates another known ransomware (Mischa) to encrypt all the local files like other ransomware.This malware is reported to propagate using the same Windows vulnerability, known as EternalBlue, that was exploited by the WannaCry ransomware. There are also reports about this ransomware gaining control over powerful system management tools like Windows PsExec and Windows Management Instrumentation.If you have not already done so, it is extremely important to have all your Windows systems patched from Microsoft.If you use Egnyte Storage Sync, please work with your IT team to make sure that these devices are not accessible from the internet.Rest assured that your files on Egnyte are protected. Please contact our support team if you want any help dealing with this.

Get started with Egnyte today

Explore the best secure platform for business-critical content across clouds, apps, and devices.

Share this article

Decentralized Clinical Trials: What Biotechs Need to Know
August 30, 2022
Abhay Kini
Read Article
Modernize and Migrate to Egnyte to Replace Your Windows File Server
August 29, 2022
David Buster
Read Article
Kris Lahiri

View All Posts
Don’t miss an update

Subscribe today to our newsletter to get all the updates right in your inbox.

By submitting this form, you are acknowledging that you have read and understand Egnyte's Privacy Policy

Thank you for your subscription!

Welcome to
Egnyte Blog

Company News
Product Updates
Life at Egnyte
Industry Insights
Use Cases