A statement issued by Group-IB said a cyber attack on October 23, 2017, appeared to have its origins in Russia and had also affected some corporate sites in Turkey and Germany A cyber attack Monday hit a Ukrainian international airport and three Russian media outlets just four months after the "NotPetya" malware spread from two countries across the world.
Ukraine's Odessa International Airport said on Facebook that its "information system" stopped functioning in the afternoon.
"All airport services are working in a reinforced security regime," the airport said without elaborating.
Its website showed air traffic going in and out of the Black Sea resort city according to schedule.
Russia's Interfax news agency—one of the country's biggest—also sent its last dispatch at 2:13 pm (1113 GMT) before falling silent.
A cyber security expert told AFP that the Fontanka news site in Russia's second city of Saint Petersburg and a third media outlet "whose name, unfortunately, we cannot reveal at this time" had also gone off line.
"We cannot say what it is at the moment," Yevgeny Gukov of the Group-IB IT security firm said in Moscow.
Gukov said the malware appeared to be using an encryption scheme that prevented analysts from deciphering the malicious code.
A statement later issued by Group-IB said the attack appeared to have its origins in Russia and had also affected some corporate sites in Turkey and Germany.
"This ransomware infects devices through a number of hacked Russian media websites," Group-IB said.
"Based on our investigation, this has been a targeted attack against corporate networks, using methods similar to those used during the (NotPetya) attack."
The July "NotPetya" attack was a modified version of the "Petya" ransomware that hit last year and demanded money from victims in exchange for the return of their computer data.
Explore further: Multinationals hit by vast wave of cyberattacks
