The Petya virus extortioner attacked the Russian and Ukrainian companies
Today the next Petya cryptovirus extortioner attacked several large Russian and Ukrainian companies. The oil, telecommunication and financial organizations became subjects to the attack. The virus locks computers and requires 300 dollars in bitcoins - it already became the traditional amount at similar programs.
The press service of the Group-IB company specializing in decisions on early detection of cyberthreats:
He locks computers and requires 300 dollars in bitcoins. The attack happened around 14.00. Judging by photos, it is a kriptoloker of Petya. The distribution method on the local area network is similar to the WannaCry virus (attacks through ports 1024-1035, 135 and 445).
According to preliminary data, networks of Bashneft and Rosneft, and also the Ukrainian companies "Zaporozhyeoblenergo", "Dneproenergo" and "The Dnieper electrical power system" suffered from a virus, "Mondelez International, Oschadbank, Mars, "New Mail", Nivea, TESA and others also suffered. The Kiev subway also underwent the hacker attack. Computers of the government organizations of Ukraine, Auchan shops, the Ukrainian operators (Kyivstar, LifeCell, "Ukrtelecom"), Privatbank are attacked. The Boryspil airport, presumably, also underwent the hacker attack" — the representative of Group-IB added.
The virus became the reason of failure in operation of the Kiev subway: passengers can't pay journey by means of cash cards. In turn, the Deputy Prime Minister of Ukraine Pavel Rozenko declared that all computers in the Cabinet of Ministers underwent the hacker attack.
Earlier I reported Rosneft about the attack to the servers. The company marked that directly transferred to standby system of control that allowed to avoid an oil production stop.
The WannaCry virus attacked hundreds of thousands of computers worldwide on May 12. Then hackers used the modified malicious application of the U.S. National Security Agency: the tool of intelligence services known as eternal blue ("bottomless blue"), was combined with "program extortioner" WannaCry.
source: https://bits.media/