Greg's Corner

New ransomware might not be able to be paid off

Yesterday, a new ransomware attack swept across the globe. The attack first hit the Ukraine before affecting business in Russia, The Netherlands, The UK and the US. The ransomware known as Petya seems to have had an even bigger effect than the recent WannaCry attack. Like WannaCry, Petya asks the victims for money in Bitcoin. While a number of business have started keeping Bitcoin on hand for just such an event, it might not be that simple this time around.

Petya requires its victims to contact their attackers at a certain e-mail address. The e-mail provider has shut down that address. So now, if the ransom is paid, there’s no way to let the attackers know. Meanwhile your files are still encrypted and you’re also out the money used for ransom. On top of that, the ransomware keeps replicating itself not knowing that it’s been cut off from home.

Again, even if Petya could call home, there’s never any guarantee that the attackers will release your files even if paid. After all, these are extortionists we’re dealing with. Like their counterparts in the analog world, once these attackers get a taste of your money they may try to squeeze you for more.

Remember, keep your system updated and patched, and avoid any strange attachments and downloads for best practices.