The big conversation around the recent ransomware attacks has been – Petya or NotPetya? So we say – does it really matter? The most important thing is that your organization is protected.

On the other hand, when our security researchers analyzed a recent variant identified by others as Petya, they found that it was not. While the world was scrambling to protect their assets from Petya, there was a parallel attack, and though it had similar characteristics to Petya and many were treating it as such, it was actually a variant of Loki Bot malware. Which brings us back to the point – who cares what it is, as long as you are protected?

Cynet – NotPetya Mitigation

Current-not-petya-technical-detailed-flow-1

Cynet – Loki Mitigation

Current-not-petya-technical-detailed-flow-2 (002)