Eating out, poor hand hygiene and erratic weather may be among causes, say medics
"There have been indications of late that Petya is in circulation again, exploiting the SMB (Server Message Block) vulnerability," the Swiss Reporting and Analysis Centre for Information Assurance (MELANI) said in an e-mail.
It said it had no information that Swiss companies had been impacted, but said it was following the situation. The Petya virus was blamed for disrupting systems in 2016.
Russia's top oil producer Rosneft said a large-scale cyber attack hit its servers on Tuesday, with computer systems at some banks and the main airport in neighboring Ukraine also disrupted.
Company and government officials reported serious intrusions at the Ukrainian power grid, banks and government offices, where one senior official posted a photo of a darkened computer screen and the words, "the whole network is down". Ukraine's prime minister said the attack was unprecedented but that "vital systems haven't been affected".
The number of companies and agencies reportedly affected by the ransomware campaign was piling up fast, and the electronic rampage appeared to be rapidly snowballing into a real-world crisis. Dutch daily Algemeen Dagblaad says that container ship terminals in Rotterdam run by a unit of Maersk were also affected. Rosneft said that the company narrowly avoided major damage.
"The hacking attack could have led to serious consequences but neither the oil production nor the processing has been affected thanks to the fact that the company has switched to a reserve control system," the company said.
There's very little information about what might be behind the disruption at each specific company, but cybersecurity experts rapidly zeroed in on a form of ransomware, the name given to programs that hold data hostage by scrambling it until a payment is made.
"A massive ransomware campaign is currently unfolding worldwide," said Romanian cybersecurity company Bitdefender. In a telephone interview, Bitdefender analyst Bogdan Botezatu said that he had examined samples of the program and that it appeared to be nearly identical to GoldenEye, one of a family of hostage-taking programs that has been circulating for months.
It's not clear whether or why the ransomware has suddenly become so much more potent, but Botezatu said that it was likely spreading automatically across a network, without the need for human interaction. Self-spreading software, often described as "worms," are particularly feared because they can spread rapidly, like a contagious disease.
"It's like somebody sneezing into a train full of people," said Botezatu. "You just have to exist there and you're vulnerable."
The world is still recovering from a previous outbreak of ransomware, called WannaCry or WannaCrypt, which spread rapidly using digital break-in tools originally created by the US National Security Agency and recently leaked to the web.
This particular variant of ransomware leaves a message with a contact email; several messages sent to the address were not immediately returned.
Eating out, poor hand hygiene and erratic weather may be among causes, say medics
The goal-scoring striker is suffering from a muscle injury sustained during the Champions League quarter-final loss to Real Madrid
Lieutenant General Abdullah Khalifa Al Marri, Commander-in-Chief of Dubai Police, made the announcement on Wednesday
6G will further elevate capabilities of robots, AI, autonomous transport and remote surgery/diagnostics among others
The Nobel laureate has been condemned for partnering with Hillary Clinton, an outspoken supporter of Israel's war against Hamas
Net profit (after tax) up 32% per cent y-o-y to Dh1.45 billion
Goalkeeper Eisa delivered a fantastic performance against Al Hilal to help Al Ain reach the final
Volunteers of the Samantha Kerala Sunni Student Federation used the machine to navigate challenging terrain