, , and
- More than 80 companies are affected, Russia’s Group-IB reports
- Energy companies, banks, government bodies all struck by virus
A new cyberattack similar to WannaCry is spreading across Europe, hitting major companies from Rosneft PJSC in Moscow to A.P. Moller-Maersk in Copenhagen while disrupting government systems in Kiev.
More than 80 companies in Russia and Ukraine were affected by the Petya virus that disabled computers Tuesday and told users to pay $300 in cryptocurrency to unlock them, according to the Moscow-based cybersecurity company Group-IB. Telecommunications operators and retailers were also affected and the virus is spreading in a similar way to the WannaCry attack in May, it said.
The intrusion is “the biggest in Ukraine’s history,” Anton Gerashchenko, an aide to the Interior Ministry, wrote on Facebook. The goal was “the destabilization of the economic situation and in the civic consciousness of Ukraine,” though it was “disguised as an extortion attempt,” he said.
Kremlin-controlled Rosneft, Russia’s largest crude producer, said in a statement that it avoided “serious consequences” from the “hacker attack” by switching to “a backup system for managing production processes.”
Denmark, France
Maersk, operator of the world’s largest container line, said its customers can’t use online booking tools and its internal systems are down. The attack is affecting multiple sites and units, which include a major port operator and an oil and gas producer, spokeswoman Concepcion Boo Arias said by phone.
Saint-Gobain, a French manufacturer, said its systems had also been infected, though a spokeswoman declined to elaborate. U.K. media company WPP Plc has also been hit. “IT systems in several WPP companies have been affected,” the company said in emailed statement.
The strikes follow the global ransomware assault involving the WannaCry virus that affected hundreds of thousands of computers in more than 150 countries as extortionists demanded $300 in bitcoin from victims. Ransomware attacks have been soaring and the number of such incidents increased by 50 percent in 2016, according to Verizon Communications Inc.
Central Bank Warning
Kievenergo, a Ukrainian utility, switched off all computers after the hack, while another power company, Ukrenergo, was also affected, though “not seriously,” the Interfax news service reported. Ukrainian airports and railways are operating as usual, according to the Russian news service.
Ukrainian delivery network Nova Poshta halted service to clients after its network was infected, the company said on Facebook. Ukraine’s Central Bank warned on its website that several banks had been targeted by hackers.
The new virus has a fake Microsoft digital signature appended to it and the attack is spreading to many countries, Costin Raiu, director of the global research and analysis team at Moscow-based Kaspersky Lab, said on Twitter.
