my tweets are severely limited by my lack of understanding of what I am doing.
Cisco Talos have been on scene at ME Doc in Ukraine and have a detailed teardown of how Petya happened - a must read http://blog.talosintelligence.com/2017/07/the-medoc-connection.html?m=1 …
-
This is seriously excellent stuff. Long story short - ME Docs Linux boxes got completely owned and software backdoored. Bad updates happened
It should be pointed out it makes Monday's Reuters interview with the business owners seem slightly crazy. http://mobile.reuters.com/article/amp/idUSKBN19O2DK …pic.twitter.com/AC3MURIftX
