Performanta Advisory: Petya Ransomware

Performanta Advisory: Petya Ransomware

Published by Elad Sharf and Nick Griffin, Cyber Defence Team, Performanta (27 June, 2017: 22:00)

Performanta has closely monitored the outbreak of a new variant of the Petya ransomware, known as ‘Petrwrap’. Many large organisations have been affected, mainly in Ukraine, although the malware has rapidly spread across the UK, Europe and the US.

‘Petya’ is a ransomware variant … Read the rest


Can North Korea be Linked to WannaCry? A Timestamp Analysis

Published by Nick Griffin (May 19, 2017)

Performanta have analysed three earlier variants of the WannaCry ransomware from April and May 2017 which attempt to guess and brute-force passwords used for SMB in order to copy themselves to network shares. These samples are evidence that the WannaCry malware author(s) have long intended to launch a widespread ransomware epidemic. We also … Read the rest