NotPetya | Detection.FYI

NotPetya Ransomware Activity

Apr 28, 2026 · attack.stealth attack.defense-impairment attack.t1218.011 attack.t1685.005 attack.credential-access attack.t1003.001 car.2016-04-002 detection.emerging-threats ·
Share on:

Detects NotPetya ransomware activity in which the extracted passwords are passed back to the main module via named pipe, the file system journal of drive C is deleted and Windows eventlogs are cleared using wevtutil

Read More