News
Supply chain attack · Europe / Global · June 2017
NotPetya Destructive Malware Outbreak
Malware spread through a compromised Ukrainian accounting software update and caused major disruption to multinational companies.
Incident
What happened
NotPetya was distributed via the update mechanism of M.E.Doc accounting software used in Ukraine.
It spread laterally using the EternalBlue SMB exploit (CVE-2017-0144) and credential theft.
Shipping, logistics, and pharmaceutical companies across Europe reported severe operational outages.
Analysis
Lessons learned
Flat networks allow malware to spread rapidly between sites.
Legacy protocols such as SMBv1 must be patched or disabled.
Credential reuse across systems enables lateral movement.
Prevention
How penetration testing helps
Internal network and Active Directory testing measure lateral movement, credential exposure, and segmentation effectiveness.
Sources
Summary based on publicly available information. DIGITPOL was not involved in this incident.