NotPetya destructive attack begins in Ukraine
A destructive operation disguised as ransomware spread through a compromised software update and caused global disruption.
· critical severity · confirmed attribution
Evidence and provenance
- Original source
- MITRE ATT&CK report ↗
- Published
- 2017-06-27T00:00:00Z
- Confidence basis
- Explicit authoritative-source attribution
- Record ID
2683287ba0a282439f96
Actors
Sandworm Team
Affected sectors
technology
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.