Quote from EY FIDS on recent ransomware attack

by Shrutee K/DNS

The recent cyber-attack through the strain of Petra Ransomware – now called PetWrap has hit many global companies through a software update from an Eastern European company. We have seen that the ransomware could be lethal as it encrypts the master boot record and hard drive, making it quite impossible to recover individual files once the entire hard drive is encrypted. While the total encryption process may take over an hour to complete, even a ten minute window could be sufficient for the ransomware to make the entire hard drive unusable.

PetWrap is known to have exploited the same vulnerability in the SMB v1.0  as WannaCry 2.0 did for which the patch was already issued. For now, PetWrap appears to be much more sophisticated than WannaCry 2.0. As precautionary measures, users are advised to patch their computers, keep their endpoint security software and firewalls updated and not open attachments from any unknown sources. In case of any suspicious behaviour encountered, users should put the computer in sleep mode and disconnect the network access immediately to safeguard their data.