Liveblog: Huge Petya ransomware wave

A June 27, 2017 intelligence report describes a new Petya ransomware variant that spread from Ukraine—likely via compromised Me-Doc auto-update servers—encrypting disks, rebooting victims to a ransom screen, and propagating across internal networks using EternalBlue and tools like PSEXEC/WMI; the report details infection behavior, mitigation steps (patch MS17-010, disable SMBv1, limit admin accounts, backups) and includes a Snort detection rule.