An article from Bloomberg News mentioned that transport authorities in India pronounced that the AP Moller-Maersk on the Jawaharlal Nehru Port Trust, the country’s biggest field port, become not able to perform, even as the Gateway Terminal India didn't perceive which cargo belongs to whom because of the Petya virus that locked their systems in change for $300 bitcoin.
“Petya attempts to encrypt a set of documents that have particular extensions. The attacker then needs Bitcoin price well worth $three hundred, which ought to be transferred to a single wallet. The sufferer then desires to send the payment notification over to an e-mail cope with,” Symantec defined.
In its internet site, Symantec urges users now not to pay the ransom as there is no guarantee that their files will be restored.
It referred to in the interview that Petya is “appropriately extra wiper instead of ransomware,” explaining that the “installation key” is only a randomly generated string of numbers displayed to the user, whilst a randomly generated Salsa20 key is used for disk encryption.
“There is not any courting among the set up key and the Salsa20 key, therefore the disk can never be decrypted,” Symantec said.
The protection company detected on June 27 the penetration of the new stress and confirmed that MEDoc, a tax and accounting software program bundle, is used for the initial insertion of Petya. Proving this, Symantec facts confirmed Ukraine is the toughest hit as MEDoc is extensively used in there.
“Petya attempts to encrypt a set of documents that have particular extensions. The attacker then needs Bitcoin price well worth $three hundred, which ought to be transferred to a single wallet. The sufferer then desires to send the payment notification over to an e-mail cope with,” Symantec defined.
In its internet site, Symantec urges users now not to pay the ransom as there is no guarantee that their files will be restored.
It referred to in the interview that Petya is “appropriately extra wiper instead of ransomware,” explaining that the “installation key” is only a randomly generated string of numbers displayed to the user, whilst a randomly generated Salsa20 key is used for disk encryption.
“There is not any courting among the set up key and the Salsa20 key, therefore the disk can never be decrypted,” Symantec said.
The protection company detected on June 27 the penetration of the new stress and confirmed that MEDoc, a tax and accounting software program bundle, is used for the initial insertion of Petya. Proving this, Symantec facts confirmed Ukraine is the toughest hit as MEDoc is extensively used in there.
