2017 Ukraine ransomware attacks information

2017 Ukraine ransomware attacks
	Petya's ransom note displayed on a compromised system
Date	27–28 June 2017
Location	Ukraine Other locations Russia ; Germany ; United States ; United Kingdom ; Spain ; India ; Poland ; Italy ; Israel ; Belarus ; Argentina ; Netherlands ; Australia ;
Type	Cyberattack
Cause	Malware, ransomware, cyberterrorism
Outcome	Affected several Ukrainian ministries, banks, metro systems and state-owned enterprises
Suspects	Russia (according to statements of Ukrainian authorities, American Michael N. Schmitt and the CIA.)

A series of powerful cyberattacks using the Petya malware began on 27 June 2017 that swamped websites of Ukrainian organizations, including banks, ministries, newspapers and electricity firms.^[10] Similar infections were reported in France, Germany, Italy, Poland, Russia, United Kingdom, the United States and Australia.^[3]^[11]^[12] ESET estimated on 28 June 2017 that 80% of all infections were in Ukraine, with Germany second hardest hit with about 9%.^[2] On 28 June 2017, the Ukrainian government stated that the attack was halted.^[13] On 30 June 2017, the Associated Press reported experts agreed that Petya was masquerading as ransomware, while it was actually designed to cause maximum damage, with Ukraine being the main target.^[14]

^ ^a ^b ^c ^d ^e ^f Rothwell, James; Titcomb, James; McGoogan, Cara (27 June 2017). "Petya cyber attack: Ransomware spreads across Europe with firms in Ukraine, Britain and Spain shut down". The Daily Telegraph. Archived from the original on 16 February 2018. Retrieved 5 April 2018.
^ ^a ^b "Tax software blamed for cyber-attack spread". BBC News. 28 June 2017. Archived from the original on 28 June 2017. Retrieved 28 June 2017.
^ ^a ^b ^c Turner, Giles; Verbyany, Volodymyr; Kravchenko, Stepan (27 June 2017). "New Cyberattack Goes Global, Hits WPP, Rosneft, Maersk". Bloomberg. Archived from the original on 5 November 2019. Retrieved 27 June 2017.
^ "Businesses warned again to update patches as Petya ransomware hits Australian offices". Financial Review. 28 June 2017. Archived from the original on 30 June 2017. Retrieved 3 July 2017.
^ "Oleksandr Turchynov: One of the mechanisms for spreading a dangerous computer virus was a system for updating the accounting software – National Security and Defense Council of Ukraine". RNBO. Archived from the original on 19 October 2017. Retrieved 30 June 2017.
^ "SBU establishes involvement of the RF special services into Petya.A virus-extorter attack". Security Service of Ukraine. Archived from the original on 19 October 2017. Retrieved 4 July 2017.
^ Cite error: The named reference SBU 1 July 2017 was invoked but never defined (see the help page).
^ Borys, Christian (26 July 2017). "Ukraine braces for further cyber-attacks". BBC News. Archived from the original on 26 July 2017. Retrieved 26 July 2017.
^ Russian military was behind ‘NotPetya’ cyberattack in Ukraine, CIA concludes Archived 13 January 2018 at the Wayback Machine Washington Post, 2018
^ Prentice, Alessandra (27 June 2017). "Ukrainian banks, electricity firm hit by fresh cyber attack". Reuters. Archived from the original on 16 July 2019. Retrieved 27 June 2017.
^ Scott, Nicole Perlroth, Mark; Frenkel, Sheera (27 June 2017). "Cyberattack Hits Ukraine Then Spreads Internationally". The New York Times. ISSN 0362-4331. Archived from the original on 13 April 2018. Retrieved 4 July 2017.{{cite news}}: CS1 maint: multiple names: authors list (link)
^ "Global ransomware attack causes chaos". BBC News. 27 June 2017. Archived from the original on 27 June 2017. Retrieved 27 June 2017.
Burgess, Matt. "There's another 'worldwide' ransomware attack and it's spreading quickly". Wired UK. Archived from the original on 31 December 2017. Retrieved 27 June 2017.
^ Cite error: The named reference Ukrif28617 was invoked but never defined (see the help page).
^ "Companies still hobbled from fearsome cyberattack". Associated Press. 30 June 2017. Archived from the original on 19 October 2017. Retrieved 3 July 2017.

[teleg-1] ^ ^a ^b ^c ^d ^e ^f Rothwell, James; Titcomb, James; McGoogan, Cara (27 June 2017). "Petya cyber attack: Ransomware spreads across Europe with firms in Ukraine, Britain and Spain shut down". The Daily Telegraph. Archived from the original on 16 February 2018. Retrieved 5 April 2018.

[BBCUkb80-2] "Tax software blamed for cyber-attack spread". BBC News. 28 June 2017. Archived from the original on 28 June 2017. Retrieved 28 June 2017.

[Turner-3] Turner, Giles; Verbyany, Volodymyr; Kravchenko, Stepan (27 June 2017). "New Cyberattack Goes Global, Hits WPP, Rosneft, Maersk". Bloomberg. Archived from the original on 5 November 2019. Retrieved 27 June 2017.

[4] "Businesses warned again to update patches as Petya ransomware hits Australian offices". Financial Review. 28 June 2017. Archived from the original on 30 June 2017. Retrieved 3 July 2017.

[5] "Oleksandr Turchynov: One of the mechanisms for spreading a dangerous computer virus was a system for updating the accounting software – National Security and Defense Council of Ukraine". RNBO. Archived from the original on 19 October 2017. Retrieved 30 June 2017.

[6] "SBU establishes involvement of the RF special services into Petya.A virus-extorter attack". Security Service of Ukraine. Archived from the original on 19 October 2017. Retrieved 4 July 2017.

[SBU_1_July_2017-7] Cite error: The named reference SBU 1 July 2017 was invoked but never defined (see the help page).

[BBCUca26717-8] Borys, Christian (26 July 2017). "Ukraine braces for further cyber-attacks". BBC News. Archived from the original on 26 July 2017. Retrieved 26 July 2017.

[9] Russian military was behind ‘NotPetya’ cyberattack in Ukraine, CIA concludes Archived 13 January 2018 at the Wayback Machine Washington Post, 2018

[10] Prentice, Alessandra (27 June 2017). "Ukrainian banks, electricity firm hit by fresh cyber attack". Reuters. Archived from the original on 16 July 2019. Retrieved 27 June 2017.

[11] Scott, Nicole Perlroth, Mark; Frenkel, Sheera (27 June 2017). "Cyberattack Hits Ukraine Then Spreads Internationally". The New York Times. ISSN 0362-4331. Archived from the original on 13 April 2018. Retrieved 4 July 2017.{{cite news}}: CS1 maint: multiple names: authors list (link)

[12] "Global ransomware attack causes chaos". BBC News. 27 June 2017. Archived from the original on 27 June 2017. Retrieved 27 June 2017.
Burgess, Matt. "There's another 'worldwide' ransomware attack and it's spreading quickly". Wired UK. Archived from the original on 31 December 2017. Retrieved 27 June 2017.

[Ukrif28617-13] Cite error: The named reference Ukrif28617 was invoked but never defined (see the help page).

[14] "Companies still hobbled from fearsome cyberattack". Associated Press. 30 June 2017. Archived from the original on 19 October 2017. Retrieved 3 July 2017.

2017 Ukraine ransomware attacks information

and 24 Related for: 2017 Ukraine ransomware attacks information

2017 Ukraine ransomware attacks

WannaCry ransomware attack

Ransomware

List of cyberattacks

Cyberattacks on Ukraine

EternalBlue

List of security hacking incidents

Supply chain attack

Emotet

Lazarus Group

2017

FIN7

2022 Ukraine cyberattacks

CrowdStrike

ESET

Cyberwarfare

Cyberattack

Cisco Talos

Trickbot

REvil

Malware

Computer security

Timeline of Internet conflicts

Dark web

Petya's ransom note displayed on a compromised system
Date	27–28 June 2017 (2017-06-27 – 2017-06-28)
Location	Ukraine^[1] Other locations Russia Germany^[2] United States^[1] United Kingdom^[1] Spain India Poland^[1] Italy Israel^[1] Belarus^[1] Argentina^[3] Netherlands^[3] Australia^[4]
Type	Cyberattack
Cause	Malware, ransomware, cyberterrorism
Outcome	Affected several Ukrainian ministries, banks, metro systems and state-owned enterprises
Suspects	Russia (according to statements of Ukrainian authorities, American Michael N. Schmitt and the CIA.)^[5]^[6]^[7]^[8]^[9]