Tech by VICE

This Is What It Looks Like When You Get Hit with the NotPetya Ransomware

It's almost impossible to recover your files.

by Ben Sullivan
Jun 30 2017, 2:19pm

It was just over six weeks ago when ransomware strain WannaCrypt infected thousands upon thousands of computers around the world.

At the time, YouTube malware historian danooct1 recorded a video showing how the malware encrypted victims' machines. Now, as the new global ransomware scourge known as NotPetya continues to cause chaos, danooct1 has uploaded a new video showing how the malware attacks.

Danooct1's video demonstrates the method and timeline of the NotPetya malware spreading over a LAN made up of four virtual machines, again, hosting dummy files that NotPetya can sink its teeth into.

Watch: This Is What It Looks Like When You Get Hit With WannaCry

"It spreads quickly laterally on an internal network, but peters out once it exhausts targets on that network," danooct1 said. "Also, it's difficult to tell if it's ransomware or an attack as there are bugs in the encryption process which render your files corrupted and not recoverable."

Security researchers at Kaspersky theorize that this aspect of the ransomware is a feature, not a bug.

Motherboard staff is exploring the cultural, political, and social influence of the iPhone for the 10th anniversary of its release. Follow along.