A Petya/NotPetya copycat comes with a twist

HybridPetya is the fourth publicly recognized actual or proof-of-concept bootkit with UEFI Safe Boot bypass performance

16 Sep 2025

ESET researchers have uncovered a brand new ransomware pressure that they’ve named HybridPetya. Whereas resembling the notorious Petya/NotPetya malware, it comes with a brand new and harmful twist – it provides the flexibility to compromise UEFI-based programs and weaponize CVE‑2024‑7344 so as to bypass UEFI Safe Boot on outdated programs. HybridPetya just isn’t actively spreading within the wild, nevertheless it’s no less than the fourth recognized actual or proof-of-concept bootkit with UEFI Safe Boot bypass performance.

What else is there to know concerning the malware? Discover out within the video with ESET Chief Safety Evangelist Tony Anscombe and ensure to learn the blogpost.