janus – Computer Security Articles

Keeping up with the Petyas: Demystifying the malware family

July 14, 2017 admin Anti-Ransomware, cybercrime, EternalPetya, Goldeneye ransomware, green petya, janus, malware, Mischa ransomware, NotPetya, Petrwrap, petya origins, Petya ransomware, ransomware, red petya

Credit to Author: Malwarebytes Labs| Date: Fri, 14 Jul 2017 16:29:04 +0000

Last June 27, there was a huge outbreak of a Petya-esque malware with WannaCry-style infector in the Ukraine. Since there is still confusion about how exactly this malware is linked to the original Petya, we have prepared this small guide on the background of the Petya family.

Categories:

Tags: Anti-Ransomware EternalPetya Goldeneye ransomware green petya janus Mischa ransomware NotPetya Petrwrap petya origins Petya ransomware ransomware red petya

MalwareBytes Security

The key to old Petya versions has been published by the malware author

July 6, 2017 admin Chimera, Chimera ransomware, cybercrime, EternalPetya, Goldeneye ransomware, janus, malware, NotPetya, Petya, Petya ransomware, ransomware, teslacrypt

Credit to Author: Malwarebytes Labs| Date: Thu, 06 Jul 2017 17:06:15 +0000

As research concluded, the original author of Petya, Janus, was not involved in the latest attacks on Ukraine. As a result of the recent events, Janus released his private key, allowing all the victims of the previous Petya attacks, to get their files back.

Categories:

Tags: Chimera Chimera ransomware EternalPetya Goldeneye ransomware janus NotPetya petya Petya ransomware ransomware teslacrypt

MalwareBytes Security

EternalPetya – yet another stolen piece in the package?

June 30, 2017 admin attribution, EternalPetya, hasherezade, hexedit, janus, malware, Malwarebytes, NotPetya, NSA, Petya, psexec, ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Fri, 30 Jun 2017 16:53:36 +0000

Since 27th June we’ve been investigating the outbreak of the new Petya-like malware armed with an infector similar to WannaCry. Since the day one, various contradicting theories started popping up. Some believed, that it is a rip-off the original Petya, others – that it is another step in its evolution. However, so far, those were just different opinions, and none of them was backed up with enough evidence. In this post, we will try to fill this gap, by making a step-by-step comparison of the current kernel and the one on which it is based (Goldeneye Petya).

Categories:

Tags: attribution EternalPetya hasherezade hexedit janus Malwarebytes NotPetya NSA petya psexec ransomware