BMB Solutions has been alerted to a new malware threat dubbed “Petya”. This software targets business computers, encrypts all data on the infected machine and then prevents all access to the affected system.
In one of the samples analyzed by the Security Experts at Trend Micro, the ransomware was spread using a combination of an email from a job applicant and a Dropbox link to their resume. The Dropbox link points to a folder containing two files: a self-extracting executable file, which pretends to be the resume, and a photo of the “applicant”.
The file downloaded isn’t actually a resume, but rather a self-extracting executable file which would then unleash a Trojan Virus onto the system. The software then blinds any antivirus programs installed before downloading (and executing) the Petya Ransomware.
Once a machine has been infected the user is presented with explicit instructions on how to regain access to their system by making the ransom payment.
The ransom price is currently at 0.99 Bitcoins (BTC), (approximately $431) – and that price would be doubled if the on-screen deadline for payment is missed.
To read more about this threat please visit the source article from Trend Micro
Simple ways to reduce your risks:
- Maintain current offsite backup of all files
- Keep Windows and other 3rd party applications up-to-date
- Exercise care in opening unsolicited attachments and links
- Do not enable macros in Microsoft Office
- Enable gateway anti-virus features on firewall if available
- Educate, train and retrain employees
To keep informed on the latest technology news, Follow BMB on Facebook!