Sent from a reader earlier today:
A quick check reveals that, apparently, another global ransomware attack is making the rounds today.
Initial reports indicate this is much like last months WannaCry attack. According to the Verge article, todays ransomware appears to be a new Petya variant called Petyawrap. At this point, we see plenty of speculation on how the ransomware is spreading (everything from email to an EternalBlue-style SMB exploit), but nothing has been confirmed yet for the initial infection vector.
Alleged samples of this ransomware include the following SHA256 hashes:
AlienVault Open Threat Exchange (OTX) is currently tracking this threat at:
Well provide more information as it becomes available.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.