topic which app and content code Petya ransomeware attack is mitigated in Advanced Threat Prevention Discussions

which app and content code Petya ransomeware attack is mitigated

vsingh — Wed, 28 Jun 2017 07:01:38 GMT

want to know in which app and content release "Petya ransomware" attack is mitigated/protected. What code I should update it on to get the protection from this attack.

As os now, we are on 698-4026 app and content code. Please suggest.

Re: which app and content code Petya ransomeware attack is mitigated

Michael_Zook — Wed, 28 Jun 2017 17:52:16 GMT

If you search Petya in the Threat Vault at https://threatvault.paloaltonetworks.com/ you will find the specific content release for Pre or Post 7.1.

Re: which app and content code Petya ransomeware attack is mitigated

acc6d0b3610eec313831f7900fdbd235 — Fri, 30 Jun 2017 01:16:45 GMT

Hi @vsingh

The below Palo Alto article gives you lots of good information on how to mitigate this threat.

Also, make sure that your firewall has the following Vulnerability Protection signature enabled and applied to your security rules to prevent exploitation by the EternalBlue exploit.

https://researchcenter.paloaltonetworks.com/2017/06/palo-alto-networks-protections-petya-ransomware/

As for checking the AV signatures (Hashes) for this malware, as @Michael_Zook mentioned, go to https://threatvault.paloaltonetworks.com and type the name Petya in the search box, and it will list all contents for you.

I hope this helps

Re: by which app &content or antivirus code bad rabbit ransomeware attack is mitigated

vsingh — Wed, 08 Nov 2017 10:41:04 GMT

by using which app &content or antivirus code bad rabbit ransomeware attack is mitigated.