OpenTrojan Intelligence Infrastructure
Search intelligence, CVEs, threats… Search
Ask AI Analyst API
English中文
Enter Portal

NotPetya (GoldenEye)

malware OpenTrojan Threat Intelligence

Destructive wiper masquerading as ransomware

Source Attribution

Origin
MITRE
Source
CISA advisory 2017
Verified
2026-08-26T16:07:01.550Z
Confidence
high

Source: CISA advisory 2017 · Verified: 2026-08-26T16:07:01.550Z · Confidence: high

Security Timeline

  • discovered NotPetya (GoldenEye) first observed
  • updated Encyclopedia entry reviewed (Phase 45C)

Quick Answer

NotPetya is a wiper disguised as ransomware that caused global billion-dollar damage in June 2017. (attributes recorded from CISA advisory 2017).

Definition

NotPetya is a wiper disguised as ransomware that caused global billion-dollar damage in June 2017.

Overview

NotPetya is a wiper disguised as ransomware that caused global billion-dollar damage in June 2017.

Behavior

  • EternalBlue propagation
  • M.E.Doc updater

First Seen

2017-06

Target

Destructive wiper masquerading as ransomware

Malware Intelligence

Family: NotPetya (GoldenEye)

Techniques: T1486, T1490

Targets: Destructive wiper masquerading as ransomware

Behavior:
  • EternalBlue propagation
  • M.E.Doc updater

Related

References

Have a follow-up question?

Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.

Ask AI about this Start an investigation

Start Investigation

Move from reading to investigating NotPetya (GoldenEye). The workspace is a structured analysis surface — not a chat — organised as:

  1. Question — what do you need to know about NotPetya (GoldenEye)?
  2. Evidence — assertions mapped to verifiable references.
  3. Timeline — events in chronological order.
  4. Related Entities — CVE, threat actor, campaign, malware links.
  5. Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
  6. Notes — your own observations and working hypotheses.

AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.

Start Investigation Open Workspace

Recommended Tools

Every tool runs passively or locally — inputs are never stored and no target is scanned.Start an investigation on this entity →