FAQ about PETYA/GOLDENEYE/PETR outbreak

**Executive summary:** This FAQ describes the Petya ransomware outbreak that began with a malicious update to Ukrainian accounting software M.E.Doc and spread laterally using leaked NSA exploits (EternalBlue/EternalRomance), credential harvesting and reuse, and legitimate admin tools (PsExec, WMI), resulting in file- and disk-level encryption that renders systems inoperable; it provides detection and mitigation guidance (MS17-010/KB2871997 patches, network port scans, credential inventory), notes a local "antidote" (placing the perfc/perfc.dat file), and warns that ransom payments are ineffective because the payment email was blocked.