NotPetya
NotPetya is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
source: ransomware.live1 refs →
NotPetya
NotPetya is an active ransomware group targeting corporate networks with encryption and double extortion.
Analyst brief
NotPetya is an active ransomware and extortion group tracked on ransomware.live. They primarily target corporate networks, encrypting files and threatening victims with exposure on their public leak site. Key TTPs include lateral movement within networks, data theft, and double extortion tactics. Defenders should especially focus on network segmentation, reliable backups, and anti-exfiltration monitoring.
crime
FAQ2
Besides threatening victims with exposure on their public leak site, what other pressure tactic does the NotPetya group use?
They use double extortion tactics, which combine file encryption with data theft.
Which measures should defenders especially focus on against the NotPetya group?
They should especially focus on network segmentation, reliable backups, and anti-exfiltration monitoring.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.