3 ms·
Writes to boot sector? Care to elaborate? Sources?
by e79 9y ago
Writes to boot sector? Care to elaborate? Sources?
- devopsproject 9y agogoogle "petya boot sector" the first link is: https://blog.malwarebytes.com/threat-analysis/2016/04/petya-ransomware/ https://blog.malwarebytes.com/threat-analysis/2016/04/petya-...
- nthcolumn 9y agoIf you see the fake chkdsk reboot to media and overwrite/fix the master boot record. It encrypts the master file table on startup (before AV etc.), has sophisticated lateral movement capabilities using WMIC. Don't bother paying the ransom - the mailbox is dead you'll never get your files back that way.