Spotlight on HybridPetya: A Fresh Cyber Threat

ESET Research has recently unveiled a new ransomware variant named HybridPetya, clearly inspired by the infamous Petya/NotPetya malware lineage. Spotted on the VirusTotal platform, this newcomer aims at exploiting weaknesses in older UEFI-based systems. HybridPetya makes the most of the CVE-2024-7344 vulnerability to bypass UEFI Secure Boot on legacy devices.

• Emergence: HybridPetya appeared on VirusTotal in early 2025, with various file names suggesting connections to Petya/NotPetya.
• Encryption Strategy: It encrypts the Master File Table (MFT), which is crucial for metadata management on NTFS-formatted drives.
• Up-to-date Targeting: Unlike its forerunners, it attacks modern UEFI systems by embedding harmful code directly into the EFI System Partition.
• Exploitation Route: The CVE-2024-7344 vulnerability is used to sidestep UEFI Secure Boot, leveraging a cloak.dat file.
• Current Status: ESET notes no active attacks yet, setting it apart from the aggressive NotPetya.

Diving Deeper into HybridPetya

By late July 2025, ransomware samples from Poland linked to previous attacks in Ukraine emerged, suggesting a connection to the 2017 NotPetya incidents, which inflicted over $10 billion in damages. Despite its heritage, HybridPetya brings a different level of technical prowess.

HybridPetya exploits UEFI systems expertly, performing disk encryption without hindrance. ESET’s analysis highlights its ability to manipulate configurations and encrypt sensitive files effectively. Although HybridPetya hasn’t launched attacks, its presence and capabilities suggest future concern.

To learn more about this research or for further collaboration, reach out to ESET’s threat intelligence team.

**For the latest cybersecurity updates, continue exploring with Qsentinel.**

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.