Manuel BisseySep 17, 2025

HybridPetya ransomware revives boot-level attacks—bypassing UEFI Secure Boot via CVE-2024-7344 and encrypting NTFS MFT. Firmware security must catch up. 🧬🖥️ #HybridPetya #Ransomware

https://thehackernews.com/2025/09/new-hybridpetya-ransomware-bypasses.html

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

HybridPetya ransomware exploits CVE-2024-7344 to bypass UEFI Secure Boot, encrypts NTFS MFT, and demands $1,000 Bitcoin ransom.

The Hacker News
CyberVeille.chSep 16, 2025
📢 HybridPetya : un clone de NotPetya capable de compromettre l’UEFI et de contourner Secure Boot
📝 Selon ESET Research, HybridPetya a été découvert sur la p...
📖 cyberveille : https://cyberveille.ch/posts/2025-09-15-hybridpetya-un-clone-de-notpetya-capable-de-compromettre-luefi-et-de-contourner-secure-boot/
🌐 source : https://www.welivesecurity.com/en/eset-research/introducing-hybridpetya-petya-notpetya-copycat-uefi-secure-boot-bypass/
#CVE_2024_7344 #HybridPetya #Cyberveille
HybridPetya : un clone de NotPetya capable de compromettre l’UEFI et de contourner Secure Boot

Selon ESET Research, HybridPetya a été découvert sur la plateforme de partage d’échantillons VirusTotal. L’équipe précise qu’il s’agit d’un imitateur de Petya/NotPetya, sans détection d’activité in-the-wild dans leur télémétrie au moment de la publication. HybridPetya se distingue de NotPetya/Petya en visant les systèmes modernes basés sur UEFI, où il installe une application EFI malveillante dans la partition système EFI (ESP). 💽 L’application UEFI déployée prend ensuite en charge le chiffrement de la Master File Table (MFT) NTFS, un fichier critique contenant les métadonnées de tous les fichiers d’une partition NTFS. ❗

CyberVeille
WinFuture.deSep 16, 2025
Sicherheitsexperten warnen vor "#HybridPetya": Die neue #Ransomware umgeht den #SecureBoot-Schutz von Windows und verschlüsselt Daten gegen Lösegeld von 1000 Dollar in Bitcoin. #Cybersecurity https://winfuture.de/news,153649.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
HybridPetya: Neues Ransomware-Bootkit umgeht Secure Boot

Internet-Kriminelle haben offenbar eine Methoden gefunden, mit der sich die Secure-Boot-Schutzfunktionen von Windows-PCs umgehen lassen, um Ransomware auf die Systeme zu bringen. Eine neue Ransomware-Variante namens "HybridPetya" nutzt dafür eine Schwachstelle in Secure Boot aus.

WinFuture.de
🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉Sep 15, 2025
🚨 ESET uncovers HybridPetya, a new ransomware targeting UEFI systems with a Secure Boot bypass (CVE-2024-7344) 🛡️💻. It encrypts files pre-boot & demands Bitcoin ransom, evolving the notorious Petya family. No widespread attacks yet—likely in testing phase ⚠️🔐 #CyberSecurity #Ransomware #HybridPetya https://cyberinsider.com/new-hybridpetya-ransomware-features-uefi-secure-boot-bypass/
#newz
New ‘HybridPetya’ Ransomware Features UEFI Secure Boot Bypass

ESET has uncovered HybridPetya, a novel strain of ransomware resembling the infamous Petya/NotPetya family, with a dangerous modern twist.

CyberInsider
TechNaduSep 13, 2025

🚨 HybridPetya ransomware bypasses UEFI Secure Boot via CVE-2024-7344.
- EFI System Partition infection
- Petya/NotPetya-style destructive encryption
- Fake CHKDSK + ransom note ($1,000 BTC)
- Found on VirusTotal; not yet seen in active attacks
Mitigation: apply Jan 2025 Microsoft patch + keep offline backups.
Follow @technadu for ransomware and infosec updates.

#HybridPetya #Ransomware #CyberSecurity #UEFI #InfoSec #ThreatIntel

securityaffairsSep 13, 2025
#HybridPetya #ransomware bypasses #UEFI Secure Boot echoing #Petya/#NotPetya
https://securityaffairs.com/182149/malware/hybridpetya-ransomware-bypasses-uefi-secure-boot-echoing-petya-notpetya.html
#securityaffairs #hacking #malware
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya

HybridPetya ransomware bypasses UEFI Secure Boot to infect EFI partitions, echoing the infamous Petya/NotPetya attacks of 2016–2017.

Security Affairs
Rene RobichaudSep 12, 2025

HybridPetya Exploits UEFI Vulnerability to Bypass Secure Boot on Legacy Systems
https://gbhackers.com/uefi-vulnerability/

#Infosec #Security #Cybersecurity #CeptBiro #HybridPetya #Exploits #UEFI #Vulnerability #BypassSecureBoot #LegacySystems

The DefendOps DiariesSep 12, 2025

HybridPetya isn’t your typical ransomware—it can hijack your computer right from boot, bypassing key security features. Could your system be more vulnerable than you think? Discover how this game-changing threat works.

https://thedefendopsdiaries.com/understanding-hybridpetya-a-new-era-of-ransomware/

#hybridpetya
#ransomware
#uefisecureboot
#cybersecurity
#infosec

Adi'Vaala vas Miðgarðr 👨🏼‍💻Sep 12, 2025

Wänn hesch Du s letsch mal dis BIOS updatet?
Frage für ‘ne Kolleg 🙃

#HybridPetya #NotPetya #Ransomware #UEFI #SecureBoot

https://thehackernews.com/2025/09/new-hybridpetya-ransomware-bypasses.html

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

HybridPetya ransomware exploits CVE-2024-7344 to bypass UEFI Secure Boot, encrypts NTFS MFT, and demands $1,000 Bitcoin ransom.

The Hacker News
The Threat CodexSep 12, 2025
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass
#CVE_2024_7344 #HybridPetya
https://www.welivesecurity.com/en/eset-research/introducing-hybridpetya-petya-notpetya-copycat-uefi-secure-boot-bypass/
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

ESET Research has discovered HybridPetya, a copycat of the infamous Petya/NotPetya malware that adds the capability of compromising UEFI-based systems and weaponizing CVE‑2024‑7344 to bypass UEFI Secure Boot on outdated systems.