Meta tags:

Headings (most frequently used words):

malware, petya, family, contents, history, 2017, cyberattack, operation, mitigation, impact, reaction, other, notable, high, level, see, also, references, further, reading,

Text of the page (most frequently used words):
the (241), 2017 (172), june (104), from (79), retrieved (75), original (71), archived (69), and (60), petya (45), july (43), ransomware (41), 2018 (41), #attack (38), that (35), was (34), cyber (25), cyberattack (25), ukraine (23), for (23), notpetya (22), march (21), malware (20), new (19), 2016 (18), 2020 (17), 2019 (17), data (17), may (16), breach (15), company (15), edit (14), its (14), with (13), 2014 (13), operation (13), august (13), this (12), ukrainian (12), russia (12), windows (12), russian (11), 2023 (11), been (11), not (11), about (10), security (10), computer (10), other (10), had (10), payload (10), wannacry (9), attacks (9), february (9), september (9), hacking (8), october (8), wired (8), outbreak (8), pdf (8), nsa (8), news (8), companies (8), system (8), software (8), also (8), were (8), variant (8), wikipedia (7), hack (7), most (7), history (7), global (7), states (7), united (7), file (7), family (6), eternalblue (6), group (6), april (6), kaspersky (6), 2022 (6), business (6), affected (6), which (6), could (6), hit (6), computers (6), used (6), spread (6), have (6), believed (6), page (5), cs1 (5), 2013 (5), national (5), government (5), issn (5), worldwide (5), international (5), reuters (5), article (5), report (5), their (5), bbc (5), vaccine (5), after (5), ransom (5), goldeneye (5), more (5), than (5), table (4), contents (4), search (4), terms (4), using (4), use (4), german (4), january (4), india (4), cybercrime (4), 2015 (4), 2010 (4), vulnerabilities (4), major (4), operations (4), team (4), hackers (4), agency (4), hacker (4), 2021 (4), greenberg (4), andy (4), devastating (4), gru (4), australia (4), cybersecurity (4), insurance (4), impact (4), maersk (4), experts (4), times (4), has (4), uses (4), microsoft (4), know (4), victims (4), via (4), files (4), found (4), dan (4), ars (4), technica (4), bitcoin (4), see (4), blamed (4), dem (4), film (4), sandworm (4), message (4), based (4), damage (4), american (4), first (4), master (4), servers (4), doc (4), account (4), infections (4), main (4), version (4), discovered (4), hide (4), move (4), sidebar (4), view (3), contact (3), policy (3), you (3), language (3), sources (3), cyberattacks (3), black (3), energy (3), state (3), vulnerability (3), army (3), access (3), kitten (3), unit (3), world (3), events (3), british (3), mail (3), bank (3), power (3), leak (3), high (3), email (3), network (3), games (3), australian (3), com (3), untold (3), story (3), further (3), press (3), release (3), against (3), december (3), six (3), destructive (3), trump (3), massive (3), stubbs (3), jack (3), spreads (3), november (3), zurich (3), over (3), million (3), hospital (3), hits (3), globally (3), guardian (3), europe (3), beiersdorf (3), will (3), abc (3), all (3), rosneft (3), oil (3), say (3), york (3), verge (3), prevent (3), recovery (3), twitter (3), but (3), address (3), created (3), what (3), goodin (3), too (3), stop (3), emergency (3), banks (3), lab (3), backdoor (3), tax (3), similar (3), targeted (3), firm (3), responsible (3), there (3), quickly (3), вірусу (3), boris (3), grishenko (3), mischa (3), portal (3), notable (3), level (3), named (3), said (3), would (3), mondelez (3), infection (3), estimated (3), among (3), systems (3), versions (3), caused (3), appears (3), due (3), encryption (3), infected (3), chkdsk (3), screen (3), being (3), users (3), payment (3), displayed (3), perfc (3), read (3), mitigation (3), changes (3), one (3), encrypts (3), well (3), earlier (3), boot (3), record (3), create (3), compromised (3), they (3), differences (3), variants (3), tools (3), languages (2), toggle (2), developers (2), code (2), privacy (2), non (2), profit (2), organization (2), last (2), hidden (2), categories (2), estonian (2), maint (2), deprecated (2), archival (2), service (2), short (2), description (2), wikidata (2), 2010s (2), org (2), gameover (2), zeus (2), duqu (2), red (2), 2012 (2), botnet (2), 2011 (2), stuxnet (2), silent (2), guccifer (2), shadow (2), brokers (2), pla (2), bear (2), bangladesh (2), alliance (2), incident (2), revenue (2), leaks (2), elections (2), indian (2), airport (2), hacks (2), democratic (2), medical (2), center (2), grid (2), office (2), management (2), yahoo (2), olympic (2), incidents (2), timeline (2), blackenergy (2), 1059 (2), 1028 (2), reading (2), department (2), officers (2), disruptive (2), actions (2), consequences (2), hill (2), virus (2), lieu (2), ted (2), house (2), letter (2), david (2), settlement (2), concerns (2), register (2), clean (2), bill (2), act (2), war (2), nato (2), warns (2), between (2), asks (2), fedex (2), are (2), 400 (2), annual (2), zdnet (2), 300m (2), scrap (2), jnpt (2), hobart (2), cadbury (2), chocolate (2), factory (2), jon (2), solon (2), olivia (2), 0261 (2), 3077 (2), across (2), telegraph (2), reckitt (2), benckiser (2), ehituse (2), because (2), says (2), production (2), unaffected (2), two (2), way (2), spreading (2), ever (2), scott (2), mark (2), perlroth (2), nicole (2), chernobyl (2), radiation (2), monitoring (2), tom (2), media (2), unusual (2), today (2), internet (2), ntfs (2), mikko (2), money (2), get (2), lee (2), huge (2), james (2), cimpanu (2), catalin (2), hern (2), alex (2), how (2), can (2), stopped (2), brandom (2), russell (2), already (2), pay (2), matt (2), wiper (2), congressman (2), mifr (2), blog (2), 2024 (2), threat (2), police (2), frenkel (2), sheera (2), proquest (2), down (2), who (2), out (2), wallet (2), turner (2), giles (2), bloomberg (2), another (2), рік (2), then (2), internationally (2), wpp (2), link (2), cite (2), dniprograd (2), дніпропетровщині (2), die (2), sind (2), den (2), und (2), aus (2), ein (2), von (2), avatar (2), ist (2), heise (2), online (2), google (2), securityweek (2), check (2), point (2), references (2), server (2), block (2), mimikatz (2), law (2), same (2), time (2), local (2), them (2), help (2), warned (2), kingdom (2), homeland (2), reaction (2), secretary (2), general (2), defense (2), according (2), largest (2), container (2), operator (2), those (2), doing (2), personal (2), community (2), several (2), assessment (2), released (2), patches (2), such (2), off (2), some (2), install (2), updates (2), possible (2), immediately (2), analyst (2), proposed (2), current (2), result (2), required (2), additionally (2), only (2), generally (2), developed (2), passwords (2), although (2), still (2), comparison (2), including (2), low (2), generating (2), researchers (2), exploit (2), user (2), administrative (2), privileges (2), second (2), execute (2), restart (2), displays (2), oktava (2), oleksandr (2), kardakov (2), seized (2), present (2), analysis (2), since (2), update (2), eset (2), stated (2), targeting (2), stations (2), attacked (2), day (2), germany (2), year (2), contained (2), encrypting (2), details (2), appearance (2), upload (2), links (2), bahasa (2), log (2), donate (2), menu (2), add, topic, mobile, cookie, statement, statistics, conduct, legal, safety, contacts, disclaimers, text, available, under, additional, apply, site, agree, registered, trademark, wikimedia, foundation, inc, creative, commons, attribution, sharealike, license, rendered, parsoid, edited, 2026, utc, dmy, dates, matches, articles, relations, crimes, computing, https, index, php, title, petya_, malware_family, oldid, 1353165387, titanium, tiny, banker, r2d2, vpnfilter, joanap, annabelle, xafecopy, triton, rensenware, logiclocker, kirk, brickerbot, agent, punkeypos, philadelphia, pegasus, mirai, memz, necurs, locky, keranger, jigsaw, industroyer, hitler, fastpos, project, sauron, teslacrypt, rombertik, kasidet, tear, flocker, centerpos, regin, kronos, finfisher, emotet, darkhotel, careto, carbanak, brambul, havex, darkseoul, cryptolocker, blackpos, shamoon, mahdi, grum, flame, fbi, moneypak, dridex, dexter, carna, alina, zeroaccess, stars, metulji, alureon, andromeda, citadel, kelihos, coreflood, blackshades, bad, rabbit, kr00k, bluekeep, microarchitectural, sampling, dragonblood, foreshadow, sigspoof, tlbleed, lazy, restore, speculative, store, bypass, exactis, efail, spectre, meltdown, blueborne, roca, krack, bob, doublepulsar, broadcom, cloudbleed, dirty, cow, badlock, drown, stagefright, jasbug, winshock, ss7, row, hammer, rootpipe, poodle, shellshock, heartbleed, iseeyou, evercookie, publicly, disclosed, jester, topiary, track2, sabu, mlt, junaid, hussain, sam, hocevar, jeremy, hammond, elliott, gunton, george, hotz, kim, anh, mustafa, bassam, ryan, ackroyd, individuals, yemen, xdedic, tailored, syrian, electronic, stealth, falcon, rocket, apollo, pranknet, platinum, 61486, 61398, numbered, panda, nso, lords, dharmaraja, andariel, bluenoroff, lazarus, islamic, division, iranian, helix, confederation, gossipgirl, fancy, equation, elfin, darkmatter, dark, basin, cozy, charming, bureau, 121, hat, appin, groups, ugnazi, tdo, teamp0ison, redhack, paypal, ourmine, nullcrew, lulzsec, lulzraft, lizard, squad, goatse, gnaa, cyberberkut, associated, anonymous, hacktivism, jeff, bezos, phone, whatsapp, snooping, scandal, bulgarian, baltimore, sri, lanka, singhealth, airways, atlanta, trustico, disqus, deloitte, equifax, westminster, macron, shattered, bitfinex, interference, dyn, surkov, breaches, dccc, vietnam, committee, commission, hollywood, presbyterian, robbery, swift, banking, vtech, talktalk, ashley, madison, hackingteam, personnel, password, theft, sony, pictures, jpmorgan, chase, celebrity, nude, photo, tovar, anthem, singapore, cyberterrorism, snapchat, south, korea, roller, stratfor, linkedin, rsa, securid, compromise, playstation, outage, antisec, hbgary, federal, dnschanger, diginotar, canadian, socialist, payback, shadownet, publication, 2009, aurora, 2020s, viruses, worms, 2000s, usa, apt, foreign, commonwealth, development, exposes, series, paralympic, justice, charged, connection, deployment, cyberspace, shaikh, rafia, wccf, tech, warn, attributed, kremlin, chalfant, morgan, admin, blames, auchard, eric, prentice, alessandra, disrupt, director, jones, dive, mondelēz, case, renews, coverage, mccarthy, kieran, shock, refuses, foot, claims, haaretz, members, pledge, spending, increase, uchill, joe, overnight, questions, tensions, chief, senate, panel, publicize, election, corporation, comparables, reduced, earnings, approximately, palmer, danny, costs, shipping, giant, evans, melanie, wall, street, journal, forced, express, apm, terminals, hacked, struck, henley, strikes, badly, ard, hackerangriff, hart, getroffen, yeomans, dettol, maker, cleans, ruuda, lennart, closed, stores, postimees, sulges, küberrünnaku, tõttu, kõik, oma, poed, chappell, dwyer, colin, npr, cripples, alfred, cnet, behind, 0362, 4331, griffin, andrew, independent, newman, lily, hay, scary, old, tricks, warren, vox, issues, highly, patch, whittaker, zack, quick, facts, fortra, alert, logic, analyzed, propagation, tweet, keep, sending, back, attackers, killed, dave, mcgoogan, cara, researcher, creates, rogers, fox, tout, protect, crippling, bleeping, killswitch, tuesday, fact, something, much, worse, late, save, suiche, comae, technologies, hatmaker, taylor, techcrunch, aftermath, knows, bleepingcomputer, originated, tainted, accounting, economic, worst, apac, 7th, symantec, thomson, iain, san, francisco, everything, need, nasty, trashing, pcs, goddin, leaking, just, dumped, damaging, yet, response, 10130295, hitting, airlines, utilities, кардаков, запропонував, створити, громадянську, кібероборону, williams, matthias, scrambles, contain, built, widely, app, seeded, week, face, charges, suggest, 1914424259, don, wcry, shutting, polityuk, pavel, ali, nour, analysts, origin, burgess, наталія, патрікєєва, radiosvoboda, після, атаки, змінилося, кібербезпеці, україни, 1913883917, wakefield, jane, verbyany, volodymyr, kravchenko, stepan, goes, causes, chaos, web, judiciary, оголошено, вирок, справі, фактами, масштабних, кібератак, muracha, ivan, регіональний, координатор, ретyа, отримав, один, тюрми, iliyeva, valery, викрили, чоловіка, який, розповсюджував, вірус, scherschel, fabian, virenschreiber, hinter, diesen, erpressungstrojanern, scheinen, große, fans, des, films, sein, wahrscheinlich, sie, neunzigern, aufgewachsen, identifizieren, sich, mit, russischen, genie, konto, welches, genau, auf, dieses, profil, passt, bild, als, nutzt, nach, verbrechersyndikat, benannt, drahtziehern, betrieben, wird, konnten, wir, nicht, bestätigen, aber, immerhin, denkbar, erpresser, nerds, constantin, lucian, networkworld, now, double, trouble, gidwani, toni, identifying, protecting, phishing, kovacs, edouard, www, canada, attribute, android, phones, decrypting, vulkan, domain, controller, 1998, cih, doj, indictment, summer, aware, urgently, responding, reports, member, involved, coordinating, partners, asked, collaborate, actively, technology, notify, future, administration, issued, statements, european, union, europol, carrier, refused, claim, cleaning, grounds, covered, sued, 100, suit, settled, remaining, confidential, pressed, strengthen, defenses, saying, trigger, principle, collective, jens, stoltenberg, 400m, interruption, ship, supply, vessel, 200m, lost, revenues, elsewhere, included, advertising, pharmaceutical, msd, multinational, french, construction, retail, subsidiary, outlets, estonia, consumer, goods, care, logistics, food, heritage, valley, health, tasmania, port, reportedly, coming, standstill, princeton, rural, west, virginia, replace, entire, path, dhl, saint, gobain, dla, piper, merck, line, during, initiated, went, offline, ministries, metro, nuclear, plant, published, white, pegged, total, damages, brought, billion, repeated, former, advisor, senior, focused, official, bossert, supported, followed, unsupported, direct, wake, extent, far, though, many, put, patching, despite, clear, potentially, enterprises, consider, certain, either, downtime, compatibility, problematic, environments, process, shut, when, fictitious, creating, installation, directory, strain, executing, listed, suspended, provider, violation, actually, send, confirmation, perpetrator, filesystem, fat, mft, sequence, skipped, allowing, recovered, trivially, posteo, dll, dat, proactive, defence, disaster, control, takes, advantage, smb, protocol, leaked, harvests, tweaked, build, open, source, techniques, conjunction, psexec, run, purports, routine, modified, technically, revert, characteristic, along, signs, relatively, unlock, fee, 300, single, fixed, collect, payments, rather, unique, each, specific, tracking, purposes, prompted, speculate, intended, venture, devices, attention, received, claiming, ride, grant, bundled, activated, failed, conventional, documents, executable, does, require, disguised, attached, cert, nccic, initial, findings, communications, integration, readiness, infects, mbr, overwrites, triggers, upon, startup, demanding, made, meanwhile, purported, output, scanner, suggesting, hard, drive, sectors, repaired, bootloader, businessman, chairman, supervisory, board, capital, civil, detecting, activity, uncontrolled, proliferation, advised, presumed, showed, applied, evidence, presence, employee, head, units, criminally, enabling, negligence, maintaining, preparation, program, facto, country, least, weeks, prior, describing, thoroughly, planned, executed, denied, entirely, stating, hyppönen, secure, mechanism, dubbed, engineer, christiaan, beek, designed, complete, bus, gas, mcafee, founder, protection, emphasized, third, economy, three, days, resulting, losses, dollars, began, utilizing, reported, france, italy, poland, majority, where, initially, hardest, president, serious, politically, motivated, occurred, eve, holiday, constitution, dmitry, peskov, vladimir, putin, note, regional, court, convicted, unnamed, citizen, prison, pleading, guilty, having, dnipropetrovsk, oblast, nikopol, name, diminutive, reference, 1995, wherein, soviet, weapon, satellites, carry, atomic, bomb, detonated, earth, orbit, produce, suggested, belonged, author, janus, solutions, crime, image, character, antagonist, played, scottish, actor, alan, cumming, alec, trevelyan, electromagnetic, pulse, bond, peter, noted, while, achieved, fewer, active, early, flagged, next, step, evolution, secondary, cannot, achieve, administrator, cryptowall, seen, propagated, attachments, primarily, propagates, referred, distinguish, these, appeared, lack, decryption, method, equivalent, specifically, within, military, intelligence, governments, targets, infecting, hdd, ssd, performs, fake, prevents, booting, overwritten, subsequently, demands, make, regain, platform, technical, classification, cryptovirus, subtype, type, part, skull, crossbones, ascii, art, free, encyclopedia, item, projects, printable, download, print, export, switch, legacy, parser, shortened, url, information, permanent, related, here, english, talk, tiếng, việt, українська, தமிழ், slovenščina, русский, português, polski, nederlands, melayu, lietuvių, lombard, 한국어, ქართული, 日本語, italiano, indonesia, magyar, français, فارسی, eesti, español, deutsch, čeština, català, العربية, top, special, pages, recent, learn, contribute, random, navigation, jump, content,

Text of the page (random words):
ssian government specifically the sandworm hacking group within the gru russian military intelligence organization by security researchers google and several governments 2 3 4 5 history edit petya was discovered in march 2016 6 check point noted that while it had achieved fewer infections than other ransomware active in early 2016 such as cryptowall it contained notable differences in operation that caused it to be immediately flagged as the next step in ransomware evolution 1 another variant of petya discovered in may 2016 contained a secondary payload used if the malware cannot achieve administrator level access 6 the name petya russian diminutive of peter is a reference to the 1995 james bond film goldeneye wherein petya is one of the two soviet weapon satellites which carry a goldeneye an atomic bomb detonated in low earth orbit to produce an electromagnetic pulse a twitter account that heise suggested may have belonged to the author of the malware named janus cybercrime solutions after alec trevelyan s crime group in goldeneye had an avatar with an image of goldeneye character boris grishenko a russian hacker and antagonist in the film played by scottish actor alan cumming 7 on 30 august 2018 a regional court in nikopol in the dnipropetrovsk oblast of ukraine convicted an unnamed ukrainian citizen to one year in prison after pleading guilty to having spread a version of petya online 8 9 10 2017 cyberattack edit main article 2017 ukraine ransomware attacks notpetya s ransom note displayed on a compromised system on 27 june 2017 a major global cyberattack began ukrainian companies were among the first to state they were being attacked 11 utilizing a new variant of petya on that day kaspersky lab reported infections in france germany italy poland the united kingdom and the united states but that the majority of infections targeted russia and ukraine where more than 80 companies were initially attacked including the national bank of ukraine 11 12 eset estimated on 28 june 2017 that 80 0 of all infections were in ukraine with germany second hardest hit with about 9 13 russian president vladimir putin s press secretary dmitry peskov stated that the attack had caused no serious damage in russia 13 experts believed this was a politically motivated attack against ukraine since it occurred on the eve of the ukrainian holiday constitution day 14 15 oleksandr kardakov the founder of the oktava cyber protection company emphasized that the petya virus stopped a third of ukraine s economy for three days resulting in losses of more than 400 million dollars 16 kaspersky dubbed this variant notpetya as it has major differences in its operations in comparison to earlier variants 11 mcafee engineer christiaan beek stated that this variant was designed to spread quickly and that it had been targeting complete energy companies the power grid bus stations gas stations the airport and banks 11 17 it was believed that the software update mechanism of m e doc uk a ukrainian tax preparation program that according to f secure analyst mikko hyppönen appears to be de facto among companies doing business in the country had been compromised to spread the malware 13 18 19 analysis by eset found that a backdoor had been present in the update system for at least six weeks prior to the attack describing it as a thoroughly well planned and well executed operation 20 the developers of m e doc denied that they were entirely responsible for the cyberattack stating that they too were victims 18 21 22 23 on 4 july 2017 ukraine s cybercrime unit seized the company s servers after detecting new activity that it believed would result in uncontrolled proliferation of malware ukraine police advised m e doc users to stop using the software as it presumed that the backdoor was still present 20 24 analysis of the seized servers showed that software updates had not been applied since 2013 there was evidence of russian presence and an employee s account on the servers had been compromised the head of the units warned that m e doc could be found criminally responsible for enabling the attack because of its negligence in maintaining the security of their servers 20 23 25 the it businessman and chairman of the supervisory board of the oktava capital company oleksandr kardakov proposed to create civil cyber defense in ukraine 26 operation edit petya s payload infects the computer s master boot record mbr overwrites the windows bootloader and triggers a restart upon startup the payload encrypts the master file table of the ntfs file system and then displays the ransom message demanding a payment made in bitcoin 6 27 28 meanwhile the computer s screen displays a purported output by chkdsk windows file system scanner suggesting that the hard drive s sectors are being repaired 1 the original payload required the user to grant it administrative privileges one variant of petya was bundled with a second payload mischa which activated if petya failed to install mischa is a more conventional ransomware payload that encrypts user documents as well as executable files and does not require administrative privileges to execute 6 the earlier versions of petya disguised their payload as a pdf file attached to an e mail 6 united states computer emergency readiness team us cert and national cybersecurity and communications integration center nccic released malware initial findings report mifr about petya on 30 june 2017 29 the notpetya variant used in the 2017 attack uses eternalblue an exploit that takes advantage of a vulnerability in windows server message block smb protocol eternalblue is generally believed to have been developed by the u s national security agency nsa 28 it was leaked in april 2017 and was also used by wannacry 28 30 the malware harvests passwords using a tweaked build of open source mimikatz 31 and uses other techniques to spread to other computers on the same network and uses those passwords in conjunction with psexec to run code on other local computers 32 33 34 additionally although it still purports to be ransomware the encryption routine was modified so that the malware could not technically revert its changes 35 this characteristic along with other unusual signs in comparison to wannacry including the relatively low unlock fee of us 300 and using a single fixed bitcoin wallet to collect ransom payments rather than generating a unique id for each specific infection for tracking purposes 36 prompted researchers to speculate that this attack was not intended to be a profit generating venture but to damage devices quickly and ride off the media attention wannacry received by claiming to be ransomware 37 38 mitigation edit see also ransomware mitigation infection control it disaster recovery emergency management and proactive cyber defence it was found that it may be possible to stop the encryption process if an infected computer is immediately shut down when the fictitious chkdsk screen appears 39 and a security analyst proposed that creating read only files named perfc and or perfc dat and or perfc dll in the windows installation directory could prevent the payload of the current strain from executing 40 41 42 43 the email address listed on the ransom screen was suspended by its provider posteo for being a violation of its terms of use as a result infected users could not actually send the required payment confirmation to the perpetrator 36 44 additionally if the computer s filesystem was fat based the mft encryption sequence was skipped and only the ransomware s message was displayed allowing data to be recovered trivially 45 microsoft had already released patches for supported versions of windows in march 2017 to address the eternalblue vulnerability this was followed by patches for unsupported versions of windows such as windows xp in may 2017 in the direct wake of wannacry 46 47 wired believed that based on the extent of damage petya has caused so far though it appears that many companies have put off patching despite the clear and potentially devastating threat of a similar ransomware spread 48 some enterprises may consider it too disruptive to install updates on certain systems either due to possible downtime or compatibility concerns which can be problematic in some environments 46 impact edit in a report published by wired a white house assessment pegged the total damages brought about by notpetya to more than 10 billion this assessment was repeated by former homeland security advisor tom bossert who at the time of the attack was the most senior cybersecurity focused official in the us government 49 during the attack initiated on 27 june 2017 the radiation monitoring system at ukraine s chernobyl nuclear power plant went offline 50 several ukrainian ministries banks and metro systems were also affected 51 it is said to have been the most destructive cyberattack ever 52 among those affected elsewhere included british advertising company wpp 51 maersk line 53 american pharmaceutical company merck co internationally doing business as msd russian oil company rosneft its oil production was unaffected 54 multinational law firm dla piper 51 french construction company saint gobain and its retail and subsidiary outlets in estonia 55 british consumer goods company reckitt benckiser 56 german personal care company beiersdorf german logistics company dhl 57 united states food company mondelez international and american hospital operator heritage valley health system 11 58 the cadbury s chocolate factory in hobart tasmania is the first company in australia to be affected by petya 59 on 28 june 2017 jnpt india s largest container port had reportedly been affected with all operations coming to a standstill 60 princeton community hospital in rural west virginia said it would scrap and replace its entire computer network on its path to recovery 61 the business interruption to maersk the world s largest container ship and supply vessel operator was estimated between 200m and 300m in lost revenues 49 62 the business impact on fedex is estimated to be 400m in 2018 according to the company s 2019 annual report 63 jens stoltenberg nato secretary general pressed the alliance to strengthen its cyber defenses saying that a cyberattack could trigger the article 5 principle of collective defense 64 65 mondelez international s insurance carrier zurich american insurance company has refused to pay out a claim for cleaning up damage from a notpetya infection on the grounds that notpetya is an act of war that is not covered by the policy mondelez sued zurich american for 100 million in 2018 66 the suit was settled in 2022 with the terms of the settlement remaining confidential 67 reaction edit europol said it was aware of and urgently responding to reports of a cyber attack in member states of the european union 12 the united states department of homeland security was involved and coordinating with its international and local partners 53 in a letter to the nsa 68 democratic congressman ted lieu asked the agency to collaborate more actively with technology companies to notify them of software vulnerabilities and help them prevent future attacks based on malware created by the nsa 34 69 on 15 february 2018 the trump administration blamed russia for the attack and warned that there would be international consequences 70 the united kingdom and the australian government also issued similar statements 71 in october 2020 the doj named further gru officers in an indictment 72 at the same time the uk government blamed gru s sandworm also for attacks on the 2020 summer games 73 other notable high level malware edit cih 1998 stuxnet 2010 wannacry 2017 see also edit internet portal law portal blackenergy domain controller windows eternalblue mimikatz sandworm hacker group server message block vulkan files leak references edit 1 2 3 decrypting the petya ransomware check point blog 11 april 2016 archived from the original on 30 june 2017 retrieved 27 june 2017 1 2 greenberg andy 22 august 2018 the untold story of notpetya the most devastating cyberattack in history wired archived from the original on 27 august 2018 retrieved 27 august 2018 greenberg andy 21 november 2019 russia s sandworm hackers also targeted android phones wired issn 1059 1028 archived from the original on 26 march 2020 retrieved 26 march 2020 kovacs edouard 16 february 2018 u s canada australia attribute notpetya attack to russia securityweek com www securityweek com archived from the original on 26 march 2020 retrieved 26 march 2020 gidwani toni 26 march 2020 identifying vulnerabilities and protecting you from phishing google archived from the original on 26 march 2020 retrieved 26 march 2020 1 2 3 4 5 constantin lucian 13 may 2016 petya ransomware is now double the trouble networkworld archived from the original on 31 july 2017 retrieved 27 june 2017 scherschel fabian a 15 december 2016 petya mischa goldeneye die erpresser sind nerds in german heise online archived from the original on 22 september 2017 retrieved 3 july 2017 die virenschreiber hinter diesen erpressungstrojanern scheinen große fans des films zu sein wahrscheinlich sind sie in den neunzigern aufgewachsen und identifizieren sich mit boris grishenko dem russischen hacker genie aus dem film ob ein twitter konto welches genau auf dieses profil passt ein bild von boris grishenko als avatar nutzt und nach dem verbrechersyndikat aus dem film benannt ist von den drahtziehern betrieben wird konnten wir nicht bestätigen aber es ist immerhin denkbar iliyeva valery 7 august 2017 на дніпропетровщині викрили чоловіка який розповсюджував вірус petya a dniprograd in ukrainian archived from the original on 7 september 2018 retrieved 7 september 2018 muracha ivan 3 september 2018 регіональний координатор вірусу ретyа на дніпропетровщині отримав один рік тюрми dniprograd in ukrainian archived from the original on 7 september 2018 retrieved 7 september 2018 оголошено вирок у справі за фактами масштабних кібератак вірусу petya judiciary of ukraine 31 august 2018 retrieved 7 september 2018 cite web cs1 maint deprecated archival service link 1 2 3 4 5 global ransomware attack causes chaos bbc news 27 june 2017 archived from the original on 27 june 2017 retrieved 27 june 2017 1 2 turner giles verbyany volodymyr kravchenko stepan 27 june 2017 new cyberattack goes global hits wpp rosneft maersk bloomberg archived from the original on 5 november 2019 retrieved 27 june 2017 1 2 3 wakefield jane 28 june 2017 tax software blamed for cyber attack spread bbc news archived from the original on 28 june 2017 retrieved 28 june 2017 perlroth nicole scott mark frenkel sheera 27 june 2017 cyberattack hits ukraine then spreads internationally the new york times proquest 1913883917 archived from the original on 13 april 2018 retrieved 24 march 2023 lee david 28 june 2017 vaccine created for huge cyber attack bbc news archived from the original on 28 june 2017 retrieved 28 june 2017 наталія п...