
09/12/2025
"HybridPetya encrypts the Master File Table, which contains important metadata about all the files on NTFS-formatted partitions," security researcher Martin Smolár said. "Unlike the original Petya/NotPetya, HybridPetya can compromise modern UEFI-based systems by installing a malicious EFI application onto the EFI System Partition."
In other words, the deployed UEFI application is the central component that takes care of encrypting the Master File Table (MFT) file, which contains metadata related to all the files on the NTFS-formatted partition. ~ Ravie Lakshmanan via The Hacker News
HybridPetya ransomware exploits CVE-2024-7344 to bypass UEFI Secure Boot, encrypts NTFS MFT, and demands $1,000 Bitcoin ransom.