Security

I cover crime, privacy and security in digital and physical forms.  

 

 

The world is suffering another ransomware nightmare today, with pharmaceutical companies, Chernobyl radiation detection systems, the Kiev metro, an airport, and banks all affected. One U.S. hospital also appears to have become a victim. Worse is expected to come, thanks to some pernicious features in the ransomware sample.

The malware widely believed to be responsible is called Petya… or NotPetya. It’s similar to Petya, but different enough that researchers are saying it’s an entirely new form of ransomware, researchers say. Backing Petya up is an exploit method borrowed from a leaked NSA hack called EternalBlue, the same WannaCry used to infect hundreds of thousands and take down hospital networks.

That’s cause for embarrassment amongst infected companies: Microsoft released a patch earlier this year that prevented any EternalBlue hacks, even pushing out updates for older, unsupported Windows systems like XP. Businesses should have patched by now, especially given the carnage WannaCry caused.

Extra powers

But NotPetya has some extra powers that security experts say make it deadlier than WannaCry. Whilst EternalBlue has allowed it to spread via a weakness in Windows’ SMB, it has other tools for moving at speed across networks. For instance, according to former NSA analyst and cybersecurity entrepreneur David Kennedy, the ransomware finds passwords on the infected computer itself to move to other systems. It does that by extracting passwords from memory or from the local filesystem itself, he explained.

“This is going to be a big one. Real big one,” Kennedy added.

On top of that, another proliferation technique is NotPetya’s abuse of PsExec, a tool usually used for carrying out limited actions on other systems, but in this case for simply spreading the infection by executing malicious code on other computers it can access. For instance, if the infected PC has administrator access to the network, every computer can become infected. A similar method is used by NotPetya with the Windows Management Instrumentation (WMI) tool, according to security expert Kevin Beaumont.

“This dangerous combination may be the reason why this outbreak has spread globally and rapidly, even after the previous outbreaks have generated media headlines and hopefully most vulnerabilities have been patched,” said ESET researcher Robert Lipovsky. “It only takes one unpatched computer to get inside the network, and the malware can get administrator rights and spread to other computers.”

Perhaps most crucially, thanks to all these added features, the new strain will infect the latest and even patched Windows PCs, including version 10, as one IT professional noted in a blog, whereas WannaCry worked largely on older systems. A Microsoft spokesperson said the company was aware of the reports and was investigating.

Pro ransomware

It appears to be the work of a professional group too, unlike WannaCry, which was full of bugs and had a killswitch that was turned on by a British security researcher and effectively killed off (though more infections occurred just last week…). There is no obvious killswitch with NotPetya, which Kaspersky said has infected at least 2,000 organizations across the globe, including Ukraine, Russia, the U.K. and America.

That professionalism might come from Petya’s birth in the bustling, highly technical cybercriminal underground. Jakub Kroustek, Threat Lab Team lead at Avast, said: “One of the perfidious characteristics of Petya ransomware is that its creators offer it on the darknet with an affiliate model which gives distributors a share of up to 85% of the paid ransom amount, while 15% is kept by the malware authors.” This kind of “ransomware-as-a-service” has been a growing concern of late, given it opens up the crime to a non-technical audience.

Whatever the class of criminal behind today’s outbreak, they’ve had a good pay day, though not an astounding one. At the time of publication, 22 payments had been made to 2.39818893 Bitcoin, worth around $5,515.

Anyone even considering paying them to unlock their computers should reverse course, however: the email account set up to provide keys has been shut down by the provider, Posteo. Thanks to that, there’s no obvious way of recovering files without backups.

Got a tip? Email at TFox-Brewster@forbes.com or tbthomasbrewster@gmail.com for PGP mail. Get me on Signal on +447837496820 or use SecureDrop to tip anyone at Forbes.

114 Comments

  1. Pretty nice post. I just stumbled upon your blog and wanted to mention that I’ve truly enjoyed surfing around your weblog posts.
    In any case I’ll be subscribing for your rss feed and I’m hoping you write once
    more very soon!

  2. you’re actually a good webmaster. The web site loading velocity is incredible.
    It seems that you’re doing any distinctive trick.

    In addition, The contents are masterpiece. you
    have done a excellent process in this topic!

  3. Magnificent items from you, man. I have bear in mind your stuff previous to
    and you are just extremely excellent. I really like
    what you’ve bought here, really like what
    you are stating and the best way through which you are saying it.
    You’re making it enjoyable and you still care for to keep it wise.
    I can’t wait to learn much more from you. That is actually a terrific site.

  4. Greetings! I know this is kinda off topic nevertheless I’d figured I’d ask.
    Would you be interested in trading links or maybe guest writing a blog post or vice-versa?
    My website goes over a lot of the same topics as yours and I think we could greatly benefit from
    each other. If you’re interested feel free to send me an email.
    I look forward to hearing from you! Terrific blog by the way!

  5. When I originally left a comment I appear to have clicked the
    -Notify me when new comments are added- checkbox and from
    now on every time a comment is added I receive 4 emails with the exact same comment.
    Is there a way you can remove me from that service? Thanks!

  6. Quest bars cheap fitnesstipsnew1 quest bars cheap 516999410492780544 quest bars cheap
    Appreciate the recommendation. Will try it out.

    Quest bars cheap fitnesstipsnew1 quest bars cheap 516999410492780544 quest bars cheap

  7. After looking at a handful of the articles on your site, I truly
    appreciate your way of blogging. I saved it to my bookmark website
    list and will be checking back in the near future.
    Please visit my website too and tell me what you think.

  8. Hey would you mind stating which blog platform you’re working with?
    I’m looking to start my own blog in the near future but I’m having a difficult time choosing between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design and style seems different then most blogs and I’m looking for something completely unique.
    P.S My apologies for getting off-topic but I had to ask!

  9. Hello there! I could have sworn I’ve been to
    this blog before but after reading through some of the
    post I realized it’s new to me. Anyways, I’m definitely delighted I found it and
    I’ll be bookmarking and checking back often!

  10. I’m gone to inform my little brother, that he should also pay a quick
    visit this weblog on regular basis to take updated from newest news update.

  11. wonderful publish, very informative. I’m wondering why the opposite specialists of this sector don’t notice this.
    You must continue your writing. I’m confident, you have a great readers’ base
    already!

  12. I think this is among the most important info for me.
    And i am glad reading your article. But should remark on some
    general things, The site style is great, the articles
    is really nice : D. Good job, cheers

  13. Link exchange is nothing else except it is just placing the other person’s web site link
    on your page at suitable place and other person will also do similar in support of you.

  14. I blog quite often and I genuinely thank you
    for your content. Your article has truly peaked my interest.
    I’m going to book mark your site and keep checking for new details about once a week.
    I opted in for your Feed too.

  15. We stumbled over here different website and thought I may as well check things out.
    I like what I see so now i am following you. Look forward
    to looking at your web page repeatedly.

  16. Awesome blog! Do you have any suggestions for aspiring writers?
    I’m planning to start my own site soon but I’m a little lost on everything.
    Would you advise starting with a free platform like WordPress or go for a paid option? There are so many options out there that I’m totally
    overwhelmed .. Any ideas? Kudos!

  17. Appreciating the time and effort you put into your site and detailed information you offer.
    It’s awesome to come across a blog every once in a while that isn’t the same outdated rehashed material.
    Excellent read! I’ve saved your site and I’m including your RSS
    feeds to my Google account.

  18. I was very pleased to find this web site.
    I want to to thank you for ones time for this wonderful
    read!! I definitely really liked every bit of
    it and I have you book marked to check out new stuff on your website.

  19. You can definitely see your skills within the article you write.
    The arena hopes for more passionate writers like you who are not afraid
    to mention how they believe. At all times go after your heart.

  20. Excellent post. I was checking continuously this blog and I am impressed!
    Very helpful information specifically the last part 🙂 I care for such info a lot.
    I was seeking this certain info for a long time. Thank you and best of luck.

  21. What’s Going down i’m new to this, I stumbled upon this I
    have discovered It positively useful and it has aided
    me out loads. I hope to give a contribution & aid other customers like
    its aided me. Great job.

  22. An interesting discussion is definitely worth comment.

    I do believe that you should publish more on this issue, it may not be a taboo matter but typically
    folks don’t speak about these issues. To the next!
    Cheers!!

  23. I am really loving the theme/design of your site. Do you ever run into any internet browser compatibility problems?
    A couple of my blog visitors have complained about my website not
    operating correctly in Explorer but looks great in Firefox.
    Do you have any ideas to help fix this problem?

  24. Hello just wanted to give you a quick heads up and let you know
    a few of the pictures aren’t loading correctly.
    I’m not sure why but I think its a linking issue.
    I’ve tried it in two different web browsers and both show the same outcome.

  25. I like the helpful information you provide in your
    articles. I will bookmark your weblog and check again here regularly.
    I am quite sure I will learn plenty of new stuff right
    here! Best of luck for the next!

  26. Thank you for any other wonderful post. Where else may just anyone get that kind of
    information in such a perfect method of writing? I have
    a presentation subsequent week, and I am on the search for such info.

  27. Great blog right here! Additionally your website rather a lot up fast!
    What web host are you using? Can I get your associate link to your host?
    I desire my website loaded up as quickly as yours lol

  28. Good day! I know this is somewhat off topic but I
    was wondering which blog platform are you using for this website?
    I’m getting tired of WordPress because I’ve had issues with
    hackers and I’m looking at alternatives for another platform.
    I would be fantastic if you could point me in the direction of a good platform.

  29. Howdy just wanted to give you a quick heads up and let you know a few of the pictures aren’t loading properly.
    I’m not sure why but I think its a linking issue.
    I’ve tried it in two different browsers and both show the same results.

  30. Does your website have a contact page? I’m having a tough time locating it but, I’d like
    to send you an e-mail. I’ve got some recommendations
    for your blog you might be interested in hearing.
    Either way, great website and I look forward to seeing it improve over
    time.

  31. You really make it seem so easy with your presentation but I find this
    topic to be actually something which I think I would never understand.
    It seems too complex and very broad for me. I am looking forward for
    your next post, I’ll try to get the hang of it!

  32. Does your website have a contact page? I’m having problems locating it but, I’d like
    to shoot you an e-mail. I’ve got some recommendations for
    your blog you might be interested in hearing. Either way, great blog and
    I look forward to seeing it grow over time.

  33. I’ll immediately clutch your rss as I can’t find your email subscription hyperlink or e-newsletter service.
    Do you’ve any? Kindly permit me understand in order that I may subscribe.

    Thanks.

  34. Hiya, I amm reallу glad Ι’ve foᥙnd this info. Tоday bloggers publish јust
    about gossips and web and tһis is ɑctually irritating.

    Α goօd site ԝith exciting content, thіѕ iѕ what
    I need. Thank you for keeping thiѕ web site, I wiⅼl bе visiting it.
    Do yⲟu ԁo newsletters? Cаn not find it.

  35. Aw, this was a very nice post. Spending some time and actual effort to make a very good article… but what can I say… I hesitate a
    lot and don’t seem to get nearly anything done.

  36. Hi, I do think this is a great web site. I stumbledupon it 😉 I’m
    going to return once again since I bookmarked it. Money
    and freedom is the greatest way to change, may you be rich and continue to
    help others.

  37. Hi there I am so excited I found your blog, I
    really found you by accident, while I was researching on Bing for something else,
    Anyhow I am here now and would just like to say thanks for a incredible post and a all round interesting blog (I also love the theme/design), I don’t have
    time to read it all at the moment but I have bookmarked it and also added
    in your RSS feeds, so when I have time I will be back to read a
    lot more, Please do keep up the great work.

  38. Thanks for a marvelous posting! I quite enjoyed reading it,
    you’re a great author. I will make sure to bookmark your blog and will often come back down the road.
    I want to encourage continue your great writing, have a
    nice weekend!

  39. Nice post. I was checking continuouusly tһis blog and I am impressed!
    Very helpful іnformation specially tһe lаst pɑrt 🙂 Ӏ care for
    such іnformation mucһ. I wɑs lօoking for thіs ϲertain іnformation for а very lonng tіme.
    Thank you and Ьest of luck.

  40. I’m more than happy to discover this website. I wanted to thank you for your time for this particularly wonderful
    read!! I definitely appreciated every little bit of it and
    I have you saved as a favorite to see new information in your site.

  41. Hello! I realize this is sort of off-topic but I needed to ask.

    Does running a well-established blog like yours take a massive amount work?
    I am brand new to writing a blog but I do write in my journal everyday.
    I’d like to start a blog so I will be able to share my own experience and
    thoughts online. Please let me know if you have any
    suggestions or tips for new aspiring bloggers. Appreciate it!

  42. An outstanding share! I’ve just forwarded this onto a friend who
    was doing a little research on this. And he actually ordered me lunch
    due to the fact that I found it for him… lol. So allow me to reword this….
    Thanks for the meal!! But yeah, thanks for spending time to discuss
    this topic here on your website.

  43. Hello there! Do you know if they make any plugins to
    help with Search Engine Optimization? I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very
    good gains. If you know of any please share.
    Thank you!

  44. Hi, I think your website might be having browser compatibility issues.

    When I look at your blog site in Firefox, it
    looks fine but when opening in Internet Explorer,
    it has some overlapping. I just wanted to give you a quick heads up!
    Other then that, superb blog!

  45. Today, I went to the beach with my kids. I found
    a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She
    put the shell to her ear and screamed. There was
    a hermit crab inside and it pinched her ear. She never wants to
    go back! LoL I know this is completely off topic but I had to tell someone!

  46. I know this if off topic but I’m looking into
    starting my own blog and was curious what all is needed to
    get set up? I’m assuming having a blog like yours would cost a pretty penny?
    I’m not very internet savvy so I’m not 100% sure. Any recommendations or advice would
    be greatly appreciated. Thank you

  47. Wonderful goods from you, man. I’ve understand your stuff previous to and you are just too magnificent.
    I actually like what you have acquired here, really like
    what you’re saying and the way in which you say it. You make it entertaining and you still take care of to keep it sensible.
    I cant wait to read much more from you. This is really a tremendous site.

  48. I know this if off topic but I’m looking into starting my own blog and was wondering what all is needed to get set up?

    I’m assuming having a blog like yours would
    cost a pretty penny? I’m not very internet
    savvy so I’m not 100% positive. Any suggestions or advice
    would be greatly appreciated. Thanks

  49. An outstanding share! I’ve just forwarded this onto a
    co-worker who was conducting a little homework on this.
    And he actually bought me dinner because I stumbled upon it for him…

    lol. So allow me to reword this…. Thank YOU for the
    meal!! But yeah, thanks for spending some time to talk about this subject here on your site.

  50. Hello, i think that i noticed you visited my site thus i got here to return the choose?.I’m attempting to to find issues
    to improve my site!I guess its adequate to use a few of your ideas!!

  51. Hey! I know this is kinda off topic nevertheless I’d figured I’d ask.

    Would you be interested in exchanging links or maybe guest writing a blog article or vice-versa?
    My site goes over a lot of the same topics as yours and I feel we could greatly benefit from each
    other. If you are interested feel free to shoot me
    an email. I look forward to hearing from you! Terrific
    blog by the way!

  52. I got this site from my buddy who shared with me on the topic of this website and now this time I am browsing this site and reading very informative
    articles or reviews at this time.

  53. Hey I know this is off topic but I was wondering if you knew of any
    widgets I could add to my blog that automatically tweet my newest twitter
    updates. I’ve been looking for a plug-in like this for quite
    some time and was hoping maybe you would have some experience
    with something like this. Please let me know if you run into anything.
    I truly enjoy reading your blog and I look forward to your new updates.

  54. A motivating discussion is worth comment. I think that you need to write
    more about this subject matter, it might not be a taboo matter but
    generally folks don’t discuss these topics. To the next!
    All the best!!

  55. My programmer is trying to convince me to move to .net from
    PHP. I have always disliked the idea because of the costs.
    But he’s tryiong none the less. I’ve been using WordPress on numerous
    websites for about a year and am concerned
    about switching to another platform. I have heard good things about
    blogengine.net. Is there a way I can transfer all my wordpress posts
    into it? Any kind of help would be really appreciated!

  56. Thanks on your marvelous posting! I genuinely enjoyed reading it, you
    may be a great author. I will be sure to bookmark your blog and definitely will come back later
    in life. I want to encourage you to definitely continue your great posts,
    have a nice morning!

  57. Attractive component to content. I simply stumbled upon your blog and in accession capital to assert that I acquire actually loved
    account your weblog posts. Anyway I’ll be subscribing
    in your feeds and even I fulfillment you get right of entry
    to constantly quickly.

  58. Hi would you mind stating which blog platform you’re working
    with? I’m planning to start my own blog in the near future but I’m having a difficult time selecting between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design and style seems different then most blogs and I’m looking
    for something unique. P.S Sorry for getting
    off-topic but I had to ask!

  59. I know this if off topic but I’m looking into starting
    my own weblog and was wondering what all is required to get setup?
    I’m assuming having a blog like yours would cost a pretty penny?
    I’m not very internet savvy so I’m not 100% sure.
    Any tips or advice would be greatly appreciated.
    Appreciate it

  60. Heya! I understand this is kind of off-topic but I had to ask.
    Does running a well-established blog such as yours require a large amount
    of work? I’m completely new to blogging but I
    do write in my diary on a daily basis. I’d like to
    start a blog so I will be able to share my experience and thoughts
    online. Please let me know if you have any recommendations
    or tips for brand new aspiring blog owners. Thankyou!

Leave a Reply

Your email address will not be published.

two + fourteen =

clear formPost comment