my tweets are severely limited by my lack of understanding of what I am doing.
This only spreads via SMB over local network, which to me suggests the initial vector was something more effective than EthernalBlue.
-
it is confirmed by a Dutch company APM, that the vector was a Phishing mail. APM was targeted by
#Petya http://www.telegraaf.nl/binnenland/28489263/___Cyberaanval_gevolg_van_klikken_op_phishing_e-mail___.html?utm_source=t.co&utm_medium=referral&utm_campaign=twitter&apw_campaign=9974328a28ad0fdbd055fe5cb86b1051 …
That may well not be accurate. Lots of companies said they got hit by email for WannaCry - they were all wrong.
