my tweets are severely limited by my lack of understanding of what I am doing.
I am on a train analysing Petya. I think this will be bigger than WannaCry. It's much better designed. Has automated lateral movement.
-
Initial infection via phishing email and also via malicious updates to Ukrainian accounting software "medoc", so multiple vectors.
I've seen no evidence on the email front. ME Docs, yes.
