- James Comey posts from a forest in wake of Mueller report Today 10:35 AM
- These are the only online dating sites worth your time Today 10:29 AM
- Jameela Jamil sparks conversation about women having to make the ‘boyfriend excuse’ Today 10:23 AM
- Trump-Russia conspiracy theorists think they’ve found secrets in the Mueller report Today 9:32 AM
- Report: YouTube is done competing with Netflix, Amazon Today 9:27 AM
- Netflix drama ‘Coisa Mais Linda’ explores Bossa Nova clubs and women’s rights in Brazil Today 8:08 AM
- The best ‘Game of Thrones’ memes to get you pumped for season 8 Today 7:30 AM
- Amazon Echo Show (2nd Gen) vs Google Home Hub: Which is better? Today 7:00 AM
- Solange sings along to Ariana Grande on Instagram Stories—and fans are obsessed Today 6:37 AM
- How to stream the entire ’30 For 30′ series for free Today 6:30 AM
- Swipe This! My happiest Facebook Memories are making me miserable Today 6:30 AM
- Musketeers: Welcome to the global Elon Musk fan network Today 6:00 AM
- Lawsuit alleges YouTube’s unboxing videos are ‘abusive’ ads aimed at kids Sunday 3:48 PM
- Dr. Dre shades Lori Loughlin with Instagram flex about his daughter getting into USC Sunday 3:13 PM
- University of Georgia frat’s racist Snapchat video draws campus outrage Sunday 1:21 PM
A major ransomware attack is spreading around the globe (updated)
The U.S. has blamed Russia.
Update 3:49pm CT, Feb. 15: The U.S. and U.K. governments accused the Russian military of orchestrating the so-called “NotPetya” ransomware attack last year.
The White House released a statement on Feb. 15, claiming the attack “was part of the Kremlin’s ongoing effort to destabilize Ukraine and demonstrates ever more clearly Russia’s involvement in the ongoing conflict.” It says the malware caused “billions of dollars in damage” across Europe, Asia, and the Americas.
The statement was released just hours after the U.K.’s defense minister accused Russia of “undermining democracy,” according to the Guardian.
You can read the Trump administration’s full statement below:
In June 2017, the Russian military launched the most destructive and costly cyber-attack in history.
The attack, dubbed “NotPetya,” quickly spread worldwide, causing billions of dollars in damage across Europe, Asia, and the Americas. It was part of the Kremlin’s ongoing effort to destabilize Ukraine and demonstrates ever more clearly Russia’s involvement in the ongoing conflict. This was also a reckless and indiscriminate cyber-attack that will be met with international consequences.
A new wave of ransomware attacks is wreaking havoc around the globe, as businesses and governments find their systems held hostage by unknown attackers.
The attack appears to have primarily targeted entities in Ukraine and Russia, including the networks of Russian oil giant Rosfnet and Ukraine’s central bank, state-run power company, and its largest airport, among other entities. However, the attack appears to be quickly spreading to other organizations around the world.
“The cyber attack could lead to serious consequences, however, due to the fact that the Company has switched to a reserve control system, neither oil production nor preparation processes were stopped,” Rosfnet said in a statement.
Ukraine’s National Bank said in a statement that the cyberattack was causing banks to have “difficulties with client services and carrying out banking operations.”
On Twitter, Ukrainian Deputy Prime Minister Pavlo Rozenko said Ukraine’s Cabinet of Ministers had also been targeted.
Та-дам! Секретаріат КМУ по ходу теж "обвалили". Мережа лежить. pic.twitter.com/B74jMsT0qs
— Rozenko Pavlo (@RozenkoPavlo) June 27, 2017
Some of our gov agencies, private firms were hit by a virus. No need to panic, we’re putting utmost efforts to tackle the issue 👌 pic.twitter.com/RsDnwZD5Oj
— Ukraine / Україна (@Ukraine) June 27, 2017
In addition to major entities in Ukraine and Russia, the ransomware has also hit British marketing firm WPP, and Dutch shipping giant Maersk. More victims are expected as security researchers attempt to uncover how the virus is spreading.
Ransomware is a computer virus that encrypts all the files on an infected computer and requires the victim to pay to regain access to their data. A researcher for cybersecurity firm Kaspersky Lab identified this particular virus as the Petrwrap or Petya ransomware. But the firm later clarified that it is not a variant of that malware and is instead a “new ransomware that has not been seen before.”
— Kaspersky Lab (@kaspersky) June 27, 2017
The malware attack follows another recent scourge of ransomware known as WannaCry, which infected computers in more than 150 countries. Like WannaCry, the new malware appears to target a vulnerability in some Windows machines that were first revealed by the leak of stolen National Security Agency cyberweapons. The NSA exploit used to carry out the attack, known as EternalBlue, was leaked in April by a group going by the name Shadow Brokers.
North Korea is suspected of carrying out the WannaCry attack. It is currently too soon to tell who launched Tuesday’s attack.
In the case of the most recent ransomware attack, the malware locks down a users’ computer and demands they pay $300 in bitcoin to have their files unlocked. As the Verge reports, very little money has so far been deposited into the bitcoin wallet linked to the malware—about 1.5 bitcoins, or around $3,500, as of publication.
Clarification: Contrary to initial reports from cybersecurity experts, the malware that caused Tuesday’s attack is not a variant of the Petrwrap or Petya ransomware.
Andrew Couts is the former editor of Layer 8, a section dedicated to the intersection of the Internet and the state—and the gaps in between. Prior to the Daily Dot, Couts served as features editor and features writer for Digital Trends, associate editor of TheWeek.com, and associate editor at Maxim magazine. When he’s not working, Couts can be found hiking with his German shepherds or blasting around on motorcycles.