Another big malware attack ripples across the world

dencal said:

This version of ransomware has been terminated at source because the perpetrator never attempted to cover its address, it is pointless installing this file as it is no longer live in the wild.

dencal said:

Here you are with confirmation...

Hacker Behind Massive Ransomware Outbreak Cant Get Emails from Victims Who Paid - Motherboard

The linked article does not confirm that this threat is no longer spreading. It only confirms that if a PC will be infected, it's no longer possible to get files back by paying because it's no longer possible to get in touch of these criminals to get decryption key.

Kari said:

The linked article does not confirm that this threat is no longer spreading. It only confirms that if a PC will be infected, it's no longer possible to get files back by paying because it's no longer possible to get in touch of these criminals to get decryption key.

That's what I was thinking, Kari. I have to go back and read the first article, and then this one, before I make a final decision on what I should do. Since I'm not a major industry, , I think I'll have time.

Kari said:

The linked article does not confirm that this threat is no longer spreading. It only confirms that if a PC will be infected, it's no longer possible to get files back by paying because it's no longer possible to get in touch of these criminals to get decryption key.

My reading is that Posteo the e-mail provider used by the blackmailer, closed the account that the threat was posted on, thereby cutting off further infections from that source.

dencal said:

My reading is that Posteo the e-mail provider used by the blackmailer, closed the account that the threat was posted on, thereby cutting off further infections from that source.

Looks like they only closed the email account; what's to say the blackmailer doesn't immediately open another email account somewhere else. I think the key words here are "from that source".

Wynona said:

Looks like they only closed the email account; what's to say the blackmailer doesn't immediately open another email account somewhere else. I think the key words here are "from that source".

Further reading including "vaccine" doesn't actually prevent infection.

Everything you need to know about the Petya, er, NotPetya nasty trashing PCs worldwide • The Register