Skip to main content
Skip to main content
Microsoft Security Intelligence
32 entries found. Displaying page 1 of 2.
Updated on Jul 17, 2017

Microsoft Defender Antivirus detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

Our ransomware page has more information on this type of threat.

Note: On June 27, 2017, a new variant of Ransom:Win32/Petya was observed spreading in several countries. The new variant added a worm-like capability that allows it to spread across affected networks. Read about the Petya outbreak here:

Alert level: severe
Updated on Jul 17, 2017

Microsoft Defender Antivirus detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

This ransomware has worm-like capabilities that allows it spread across infected networks. It's spreading capabilities include:

  • Lateral movement using credential theft and impersonation
  • Lateral movement using the EternalBlue and EternalRomance exploits

For more information on this threat, which caused an outbreak on Jun 27, 2017, read these blog posts on the Windows Security blog:

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Aug 21, 2023
Alert level: severe
Updated on Aug 21, 2023
Alert level: high
Updated on Jul 17, 2017

Microsoft Defender Antivirus detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

It may be installed by malicious documents with embedded macro, such as Trojan:O97M/Goldeneye.A.

Our ransomware page has more information on this type of threat.

Note: On June 27, 2017, a new variant of Ransom:Win32/Petya was observed spreading in several countries. The new variant added a worm-like capability that allows it to spread across affected networks. Read about the Petya outbreak here:

Alert level: severe
Updated on Jul 17, 2017

Microsoft Defender Antivirus detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

This ransomware has worm-like capabilities that allows it spread across infected networks. It's spreading capabilities include:

  • Lateral movement using credential theft and impersonation
  • Lateral movement using the EternalBlue and EternalRomance exploits

For more information on this threat, which caused an outbreak on Jun 27, 2017, read these blog posts on the Windows Security blog:

Our ransomware page has more information on this type of threat.

Alert level: severe
Updated on Jul 17, 2017

Microsoft Defender Antivirus detects and removes this threat.

This ransomware can stop you from using your PC or accessing your data. It might ask you to pay money to a malicious hacker.

Our ransomware page has more information on this type of threat.

Note: On June 27, 2017, a new variant of Ransom:Win32/Petya was observed spreading in several countries. The new variant added a worm-like capability that allows it to spread across affected networks. Read about the Petya outbreak here:

Alert level: severe
Updated on Oct 19, 2017
Alert level: severe
Updated on Mar 30, 2018
Alert level: severe
Updated on Mar 30, 2018
Alert level: severe
Updated on Mar 29, 2017
Alert level: severe
Updated on Jun 27, 2017
Alert level: severe
Updated on Jun 27, 2017
Alert level: severe
Updated on Jun 28, 2017
Alert level: severe
Updated on Jun 28, 2017
Alert level: severe
Updated on Apr 05, 2016
Alert level: severe
Updated on Jun 28, 2017
Alert level: severe
Updated on Jun 28, 2017
Alert level: severe
Updated on Jul 21, 2021
Alert level: severe
Updated on Dec 09, 2021
Alert level: severe