"New"

Petya has been around for some time already. This is mostly an update to it to use the same exploit as WannaCry.

Still, keep off-site backups (and backups of those backups!) and the usual in case of an attack.

____________________

Posted by Splitwirez

So, wait...is this patch separate from the WannaCry one? I would've thought so, but this:
seemingly indicates otherwise...??

I wasn't properly informed at the time so I went with that assumption that it was just an upgrade of the original Petya (or NotPetya as how it's called now).

By now, I did read a bit more on the ransomware, and this is what I found:

• The worm won't encrypt at all if you create the file C:\WINDOWS\perfc.dat as read-only. It will still try to propagate itself, though.
  
• It doesn't travel outside it's own /24 network, making me think it was a targeted attack.
  
• Its email was shutdown so the infected users won't be able to recover their files... Oops?
  
• It encrypts offline in a modified chkdisk terminal. The process starts as soon you see the message, so you can turn off the PC ASAP, plug the drive into another PC and copy your files away (and possibly format the infected drive).
  

This article could help as some reading material.


And FWIW: You can run almost if not every windows ransomware on Linux, with the help of a little thing called Wine.

____________________