Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
mobile.nytimes.com
Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
1–10 of 505 posts
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#2It's not 12 nations.... it's all over the world...
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#3We really are living in the future. My condolences to the NHS, but what a time to be alive.
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#4I am in Tanzania(East Africa) and my father's computer is infected.
All he did to get infected was plugging his laptop on the network at work(University of Dar Es Salaam).
The laptop is next to me and my task this night is to try to remove this thing.
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#5I am in Tanzania(East Africa) and my father's computer is infected. All he did to get infected was plugging his laptop on the network at work(University of Dar Es Salaam). The laptop is next to me and my task this night is to try to remove this thing.
Just that? No click somehwhere?
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#6I am in Tanzania(East Africa) and my father's computer is infected. All he did to get infected was plugging his laptop on the network at work(University of Dar Es Salaam). The laptop is next to me and my task this night is to try to remove this thing.
Just that? No click somehwhere?
If someone connects to a network which has been infected and they've not applied the appropriate patch (MS17-010) it looks like they're in trouble if they're running Windows and don't have a firewall blocking incoming connections.
So first person in a network has to have fallen for the phishing attack, but once it's in the network it can spread via the ETERNALBLUE exploit.
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#7> "Microsoft rolled out a patch for the vulnerability last March, but hackers took advantage of the fact that vulnerable targets — particularly hospitals — had yet to update their systems."
> "The malware was circulated by email; targets were sent an encrypted, compressed file that, once loaded, allowed the ransomware to infiltrate its targets."
It sounds like the basic (?) security practices recommended by professionals - keep systems up-to-date, pay attention to whether an email is suspicious - would have covered your network. Of course, as @mhogomchunu points out in his comment - is this the sort of thing where only one weak link is needed?
Still. Maybe this will help the proponents of keeping government systems updated? And/or, maybe this will prompt companies like MS to roll out security-only updates, to make it easier for sysadmins to keep their systems up-to-date...?
(presumably, a reason why these systems weren't updated is due to functionality concerns with updates...?)
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#8I am in Tanzania(East Africa) and my father's computer is infected. All he did to get infected was plugging his laptop on the network at work(University of Dar Es Salaam). The laptop is next to me and my task this night is to try to remove this thing.
Just that? No click somehwhere?
It can copy itself across a network through a vulnerability in SMB, Windows' file-sharing protocol. That's the bug that was disclosed in the NSA leaks. Microsoft released a patch in March, but of course not all computers are patched.
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#9[deleted]
Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool
#10One of the side effect if states participate in the proliferation of offensive tools. Won't be the last time state-sponsored tools, exploits or backdoors fall into the hands of interested third parties.
I think collateral damage like that is way underrated by politicians all around the globe that call for their respective intelligence agencies to build up offensive capabilities to be able to conduct cyber warfare and whatnot.