ExPetr/Petya/NotPetya is a Wiper, Not RansomwareAfter an analysis of the encryption routine of the malware used in the Petya/ExPetr attacks, we have confirmed that the threat actor cannot decrypt victims’ disk, even if a payment was made. This supports the theory that this malware campaign was not designed as a ransomware attack for financial gain. Instead, it appears it was designed as a wiper pretending to be ransomware.
Source:
ExPetr/Petya/NotPetya is a Wiper, Not Ransomware
