Excerpt
Infecting the Master Boot Record (MBR) and encrypting files is nothing new in the world of malicious programs. Back in 1994, the virus OneHalf emerged that infected MBRs and encrypted the disk contents. However, that virus did not extort money. In 2011, MBR blocker Trojans began spreading (Trojan-Ransom.Win32.Mbro) that infected the MBR and prevented the operating system from loading further. The victim was prompted to pay a ransom to get rid of the problem. It was easy to treat a system infected by these blocker Trojans because, apart from the MBR, they usually didn’t encrypt any data on the disk.
Today, we have encountered a new threat that’s a blast from the past. The Petya…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Kaspersky on securelist.com.
More from Kaspersky7
- Mirage Kitten targets Middle East and Africa region with new malwareKaspersky · Published 28 Jul
- Armored Likho's new weapon: BusySnake StealerKaspersky · Published 3 Jul
- Kaspersky discovers Keenadu – a multifaceted Android malware that can come preinstalled on new devicesKaspersky · Published 17 Feb
- The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoorKaspersky · Published 29 Dec 2025
On the same topics
- Ragnar LoaderPRODAFT · Added 18 Oct
- Netwalker malware: What it is, how it works and how to prevent itInfosec Institute · Published 29 Jul 2020
- How CrowdStrike Analyzes macOS Malware to Optimize Automated DetectionCrowdStrike · Published 6 May 2022
- Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomwareMicrosoft · Published 19 May
