Keep your eyes on these

VERY IMPORTANT

Security Articles

RSS

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

released on 2025-09-12 @ 07:33:41 PM
HybridPetya, a new ransomware discovered on VirusTotal, combines features of Petya and NotPetya while adding UEFI system compatibility. It encrypts the Master File Table on NTFS partitions and can compromise UEFI-based systems by installing a malicious EFI application. A variant exploits CVE-2024-7344 to bypass UEFI Secure Boot on outdated systems. Unlike NotPetya, HybridPetya allows key recovery, functioning as regular ransomware. While not yet observed in the wild, its technical capabilities, including MFT encryption and Secure Boot bypass, make it noteworthy for future threat monitoring.