eua1024

https://github.com/AppImage/AppImageKit/wiki/FUSE

Warning: While libfuse2 is OK, do not install the fuse package as of 22.04 or you may break your system

If the fuse package did break your system, you can recover as follows:
1. After starting Ubuntu, enter the console by pressing **Alt+Ctrl+F1**. Then log in with your user account.
2. Or boot into the Recovery Mode (https://wiki.ubuntu.com/RecoveryMode). Then chose `network` and `root`.
3. Execute the command `sudo apt purge gdm3 && apt install gdm3 && reboot`

eua1024

d02 ex03 who.php

http://php.net/manual/en/function.unpack.php

https://code.woboq.org/userspace/glibc/sysdeps/gnu/bits/utmpx.h.html

https://github.com/libyal/dtformats/blob/master/documentation/Utmp%20login%20records%20format.asciidoc

Utmp login records format

eua1024

#petya #petrWrap

Win32/Diskcoder.Petya.C
Ransomware attack.

Got new info? Email at isox@vulners.com

"it appeared to encrypt a selection of files (PDF and RTF) on two test machines prior to rebooting and encrypting parts of the MFT." - waiting for the details and PoC 

*********** KILLSWITCH // PARTIAL? GOT PROOF - EMAIL!