New Ramsomware, PETYA Overwrites The Master Boot Record

Human resources and other relevant network administrators need to be aware of a new computer ransomware virus in town called PETYA. Unlike previous ransomware, Petya does not encrypt a particular file extension, but instead goes into the MBR of the computer to overwrite it completely.

                         

The ransomware was revealed by the security researchers at Trend Micro, and the new ransomware is going after companies, so it can attack the whole system at once. The ransomware causes a blue screen of death (BSOD), and won't allow users to boot from to safe mode, you turn on the system, and all you see is a skull on a flashing red background.

Petya targets the HR department of the company in the form of a CV from an applicant. The CV will then show a link to Dropbox to download file, and when the link is clicked, the hard drive get all encrypted, and distrubuted too.

Users will be allowed to decrypt the website after a payment of 0.99 bitcoin (($412.50)  which will double after one week.

See PETYA in action in this video: