Threat actors in the wild have found the way to hijack the Petya ransomware on the fly and use it in targeted attacks, say welcome to PetrWrap ransomware. The PetyA ransomware was first spotted by experts at TrendMicro one year ago, it overwrites MBR to lock users out of the infected machines. Users turning on the computer are displayed a flashing red and white screen with a skull-and-crossbones instead. The attackers first compromised the networks of target organizations, then used the PsExec tool to install a ransomware.”]
Source: http://securityaffairs.co/wordpress/57147/malware/petrwrap-petya-ransomware.html