Microsoft says hacked software updater source of global Petya ransomware attack

Microsoft has confirmed that the Petya ransomware attack was initiated through a legitimate MEDoc updater process. The ransomware strain, now referred to as NotPetya, is worse than the original Petya format and leverages the NSA ETERNALBLUE exploit. The attack has infected companies in 64 countries, with Ukraine being hit the hardest. According to Kaspersky Labs officials, the attack is on pace to be as big as the WannaCry outbreak. Victims are advised to not pay the ransom, as the email address for contact has been shut down.