The Russian branches of the manufacturers

[relemedf5w023]

The industrial and government infrastructure of Ukraine suffered the most from the actions of the ransomware virus, which is similar in nature to WannaCry: the networks of Ukrenergo, the largest energy companies and banks of Ukraine were disabled, many of which suspended customer service. Boryspil Airport reported possible flight delays. The official websites of the Ukrainian authorities were also attacked: the website of the Lviv City Council, the website of the Ukrainian government, mobile operators, the largest hypermarkets, etc.

In Russia, Mars, Nivea, the metallurgical malaysia mobile database EVRAZ, as well as the energy market giants Bashneft and Rosneft reported the infection. In addition, hackers attacked the servers of the representative offices of international companies Mondelēz International and DLA Piper in Spain, paralyzing the work of their offices. Similar problems befell one of the leading sea freight carriers, the Danish AP Moller-Maersk. It reported that the cyberattack disabled its computer systems. The British advertising company WPP also reported that its IT system was hacked.

Preliminary investigation by Bitdefender suggests that the malware is a clone of the GoldenEye ransomware program from the Petya malware family. Experts from another antivirus company, Symantec, reported that, as in the case of WannaCry, hackers used a modified EternalBlue program for the attack, originally developed by the US National Security Agency. It was stolen by hackers and published in April 2017.