What is Petya?

Petya is a strain of ransomware that has been in existence since 2016. However, it differs from typical ransomware as it doesn’t just encrypt files, it also overwrites and encrypts the master boot record (MBR).

As explained by Microsoft, ransomware is a type of malware that stops you from using your PC. It holds your PC or files for "ransom".

There are different types of ransomware. However, all of them will prevent you from using your PC normally, and they will all ask you to do something before you can use your PC.

They can target any PC users, whether it’s a home computer, endpoints in an enterprise network, or servers used by a government agency or healthcare provider.

Ransomware can:

Prevent you from accessing Windows.

Encrypt files so you can't use them.

Stop certain apps from running (like your web browser).

Ransomware will demand that you pay money (a “ransom”) to get access to your PC or files. We have also seen them make you complete surveys.

There is no guarantee that paying the fine or doing what the ransomware tells you will give access to your PC or files again.

In tech buzz, many organizations in Europe and the US have been crippled by a ransomware attack known as ‘Petya’. The malicious software has spread through large firms including the advertiser WPP, food company Mondelez, legal firm DLA Piper and Danish shipping and transport firm Maersk, leading to PCs and data being locked up and held for ransom. Find out more at The Guardian.

Wednesday, June 28 2017
Source: https://www.microsoft.com/en-us/security/portal/mmpc/shared/ransomware.aspx

Related questions