Petya Is Not A Ransomware, It’s A Destructive Wiper!

The Petya ransomware is wreaking havoc across the world. Europe, US, and India are the countries which have been on the target. Researchers claimed that the creator of Petya is not looking to collect money from victims or enterprises.

When we thought that the destruction of the Vanarae Ranomavar was stopped, then another similar attack was seen in the banks of Ukraine. The latest ransomware, which goes by the name of the patio, is locking the computer of government offices.

PETA ransomware is going on havoc all over the world. Europe, America and India are some of the countries which are on target Recently, security researchers have come out with the results of the ongoing attack. It is concluded by saying that the chestnut is not a rhinovirus, it is a wiper.

Researchers called Petya as a wiper because it was intended to destroy the data. The researchers claimed that the creators of the box are not trying to collect money from victims or enterprises.

The thong has been from the last two years. Matt Suiche, founder of Cyber Security firm Comae, examined Petya's 2016 and 2017 edition and found that the current version is a wiper, Matt Suiche published a long blog post in which he talked about how the box works.

According to the matte list, the current version of the chest is removing all the first areas of the disk and causes a planned destruction of data. Matt Suiche also explained the difference between wiper and ransomeware, he said: "A wiper will destroy the possibilities of restoring the bus."

The Petya used to overwrite the data on the disc, and it is not read anywhere. The real difference between Petya's 2016 and 2017 edition is that the 2016 version modified the disc in such a way that it was possible to get back the data. However, the 2017 version makes it impossible to get back the data.

On the other hand, Kaspersky analyzed the installation ID which is displayed on the victim's screen, which they say is just creating random data. The security firm says that the attacker can not really decrypt the disc after the ransom because there is no decryption key in it.

So, what do you think about this? Share your thoughts in the comment box below.