---
id: 6046
title: "WannaCry, NotPetya, MBR-ONI and Friends: Tales of Wiper Attacks and Active Directory Destruction"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/wannacry-notpetya-wiper-attacks-active-directory/"
published_at: "2018-04-24T17:04:15Z"
tags: ["incident-response", "active-directory", "ransomware", "case-study", "notpetya", "wiper-attack"]
phying_url: "https://phying.com/item/6046"
lang: en
---

# WannaCry, NotPetya, MBR-ONI and Friends: Tales of Wiper Attacks and Active Directory Destruction

## Summary

Wiper war stories: inside a 10,000-employee manufacturer whose entire AD and backup servers fell to NotPetya in under 10 minutes—and the hard recovery decisions that followed.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2018-04-24T17:04:15Z
- **Original:** https://www.semperis.com/blog/wannacry-notpetya-wiper-attacks-active-directory/
- **Phying News:** https://phying.com/item/6046