NotPetya: Ransomware or Wiper? – Daily Security Byte

Is Petya 2.0 really ransomware, or is it a “false flag” nation state attack designed to damage organizations in the Ukraine, while distracting the press? That’s the question some researchers are asking of this new ransomware (or should I say wiper?).

Today’s video covers some of the latest details from researchers reverse engineering Petya 2.0. These experts have found several clues suggesting NotPetya doesn’t actually encrypt your files or hard drive in a recoverable way. They conclude the actors behind the threat made these mistakes on purpose, and designed the malware as a damaging wiper. Some even theorize that this is a Russian nation state attack targeted at the Ukraine. Is Petya 2.0 broken ransomware or a false flag cyber attack? Watch the video below to hear about the new evidence and decide for yourself.

Episode Runtime: 5:07

Direct YouTube Link: https://www.youtube.com/watch?v=RN2Lwza8Uf4

EPISODE REFERENCES:

• Kaspersky researchers find fake key in NotPetya – Securelist
• Researchers share evidence that Petya 2,0 is a wiper – Comae
• The hot new attack sweeping the nation – Engadget

Corey Nachreiner, CISSP (@SecAdept)