A number of companies in the Netherlands have been affected by the hostile virus that is evolving worldwide. These include "at least two" customers of computer security company Fox-IT. Container terminal APM in Rotterdam is also affected by the virus, but it is not clear whether this company is a customer of Fox-IT. There are also reports from Overijssel.
With a ransomware or hostage virus attack, hackers "hijack" files, which they only decrypt when the target pays.
"There is panic," says director Ronald Prins of Fox-IT. "Companies find that one computer has been hit and turns off their entire network." As a result, Fox-IT can no longer look at customers affected. "We have to physically go by to inspect."
Earlier today, terminal terminals APM reported in Rotterdam to be affected by the ransomware attack. APM's parent company, Maersk, says itself to be affected by a malfunction. The company would be completely flat Also, the location of APM in Morocco, a major transit port between Africa and the rest of the world, would be out of the air.
Companies in Overijssel are affected, reports RTV Oost. This includes the building materials wholesale Raab Karcher.
At the National Cyber Security Center of the Dutch Government, no other "infections" in the Netherlands have yet to be announced.
Ukraine
In Ukraine, the government's network is flat, as well as networks of banks and energy companies. The airport of Kiev has also been hit by a 'digital attack', which makes possible flights delayed. Ukraine speaks of an unprecedented attack.
The Russian state-owned oil company Rosneft says its target, but the digital attack would not affect production. The UK advertising agency WPP would also be affected. Companies in France, India and Spain also report attacks with ransomware.
In Ukraine and at the container company APM in Rotterdam, the same ransomware texts have appeared in the computer screens. It asks for ransom in the form of bitcoins. It is still unclear whether there is actually a connection between the attacks.
The texts show similarities with the Wannacry-host virus, which in a short period of time knew many computer networks were able to contaminate. However, it seems to be the Petya ransomware, reports security investigator Costin Raiu on Twitter.
What strikes is that the virus spreads itself quickly, just like the WannaCry virus did. "This virus may abuse the same vulnerability as Wannacry," says security investigator Rickey Gevers. According to the anti-virus company Avira, that is indeed true.
WannaCry spread itself through a security issue in the Windows module that is used to share files with other computers.