Petya Ransomware Update

The new ransomware causing havoc this week is Petya (Petrwrap/GoldenEye). While it is similar to the WannaCry ransomware from last month, there are a few significant differences.First, there is no “kill switch” for this ransomware and hence it is spreading quite rapidly.Second, there seems to be 2 parts to this where the malware first tries to get administrative privileges on the local computer and encrypt the Master Boot Record (MBR) and the Master File Table(MFT) . When this happens successfully, the user is completely locked out of the system. The only resolution will be to re-provision this system from scratch and rely on your backups to recover your data.If the malware is unable to access the MBR, it incorporates another known ransomware (Mischa) to encrypt all the local files like other ransomware.This malware is reported to propagate using the same Windows vulnerability, known as EternalBlue, that was exploited by the WannaCry ransomware. There are also reports about this ransomware gaining control over powerful system management tools like Windows PsExec and Windows Management Instrumentation.If you have not already done so, it is extremely important to have all your Windows systems patched from Microsoft.If you use Egnyte Storage Sync, please work with your IT team to make sure that these devices are not accessible from the internet.Rest assured that your files on Egnyte are protected. Please contact our support team if you want any help dealing with this.

Get started with Egnyte today

Explore our unified solution for file sharing, collaboration and data governance.

AI's Role in Securing AEC Data: Paving the Path Forward
May 22, 2024
Nick Decker
Read Article
Empowering Your Defense: Synergy between Data Loss Prevention Controls and Automated Alert Remediation
May 6, 2024
Ram Boreda
Read Article
Kris Lahiri

View All Posts
Don’t miss an update

Subscribe today to our newsletter to get all the updates right in your inbox.

By submitting this form, you are acknowledging that you have read and understand Egnyte's Privacy Policy

Thank you for your subscription!

Welcome to
Egnyte Blog

Company News
Product Updates
Life at Egnyte
Industry Insights
Use Cases