{"id":5584,"date":"2018-11-22T16:00:36","date_gmt":"2018-11-22T10:30:36","guid":{"rendered":"https:\/\/antivirus.comodo.com\/blog\/?p=5584"},"modified":"2025-06-08T18:16:23","modified_gmt":"2025-06-08T12:46:23","slug":"notpetya-ransomware","status":"publish","type":"post","link":"https:\/\/antivirus.comodo.com\/blog\/comodo-news\/notpetya-ransomware\/","title":{"rendered":"What is NotPetya?"},"content":{"rendered":"

NotPetya virus outwardly resembles the Petya ransomware in many ways, however, the fact is that it’s different and a lot more dangerous than Petya. When Petya affected numerous systems even the best antivirus and virus removal programs failed to deduct it. It brought many systems to a grinding halt for a while until the virus protection<\/a> programs could get the updates on the new ransomware<\/a>.<\/p>\n

\"NotPetya\"<\/p>\n

Petya \u2013 What is it?<\/h2>\n

Petya belongs to the family of encrypting ransomware and it was first identified in the year 2016. The malicious code was created to attack the Microsoft Windows-based computers. Basically, it infects the master boot record of a Windows machine to execute a payload that encrypts a hard drive’s file system table. This prevents the Windows machine from booting. Consequently, the user is shown a message demanding to make a payment in Bitcoin to regain access to their system.<\/p>\n

NotPetya \u2013 What is it?<\/h2>\n

NotPetya the close relative of malware kind Petya successfully infected thousands of computers in 2017 across the globe. Both Petya and NotPetya have enough common features but NotPetya was basically seen as just a variation on the theme.<\/p>\n

Later experts discovered that NotPetya<\/strong> has numerous potential tools to help it spread and infect computers. Petya Virus was a conventional piece of ransomware that attempted to make some quick Bitcoin from its victims. However, NotPetya thought to be a similar ransomware, later it was identified as a state-sponsored Russian cyber-attack masquerading as ransomware. (https:\/\/radioyskl.com\/<\/a>) <\/p>\n

How NotPetya Spreads?<\/strong><\/h3>\n

The original Petya ransomware arrived through a spam email and it required the victim to download it. It remained dormant until it was launched and also required to give it admin permissions. In the case of NotPetya, it spreads on its own. NotPetya makes use of several other methods to spread without human intervention.<\/p>\n

An accounting software package used by Ukraine companies seems to be the original infection vector offering the backdoor for NotPetya. As mentioned above, NotPetya used many more techniques to spread to other computers. This includes EternalRomance and EternalBlue, two exploits developed by the United States NSA. They were designed to take advantage of a flaw in the Windows implementation of the SMB protocol which can also take advantage of a tool called Mimi Katz.<\/p>\n

How to Stay Protected From NotPetya?<\/strong><\/h3>\n

The foremost thought behind any ransomware attack<\/a> is to infect the users\u2019 system through spam emails. Follow the below mentioned ways to prevent NotPetya ransomware:<\/p>\n

The computers that run with older versions of Windows are infected by NotPetya. According to Microsoft, the Windows 10 OS fends of NotPetya attacks<\/strong> because of the improved security measures. It successfully blocked other ways in which NotPetya spread from machine to machine.<\/p>\n

\n

How to Stay Protected From NotPetya?<\/h2>\n

It successfully blocked other ways in which NotPetya spread from machine to machine:<\/p>\n