WannaCry – New Variants Detected
blog.comae.io
WannaCry – New Variants Detected
1–10 of 164 posts
Re: WannaCry – New Variants Detected
#2How does 'Patient A' get wcry2? Phishing? Via internet facing open 445/3389?
Re: WannaCry – New Variants Detected
#3Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ?
These people are going down . No doubt about it.
Re: WannaCry – New Variants Detected
#4How does 'Patient A' get wcry2? Phishing? Via internet facing open 445/3389?
From what I've read, initial attack vector is still not known for sure. Spear phishing seems to be the current best hypothesis. I don't think anyone's seen a mass phishing campaign.
See: https://arstechnica.com/security/2017/05/an-nsa-derived-rans...
Re: WannaCry – New Variants Detected
#5Two researchers said they found a variant with a kill switch.
https://motherboard.vice.com/en_us/article/round-two-wannacr...
Re: WannaCry – New Variants Detected
#6Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ? These people are going down . No doubt about it.
Unless it was the FSB. Then its 'aw shucks the russian hackers did it again'.
Re: WannaCry – New Variants Detected
#7Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ? These people are going down . No doubt about it.
I think you vastly overstate this. While I can't speak to GHCQ, I really don't think NSA has a charter to pursue justice. The FBI may be, but I'm just not convinced they will move quick enough to matter (they do move, but only against a large established organization).
Re: WannaCry – New Variants Detected
#8Maybe it would be better to wait until the attackers registered the domain, then sopoeana the registrair for their account info.
Re: WannaCry – New Variants Detected
#9Maybe it would be better to wait until the attackers registered the domain, then sopoeana the registrair for their account info.
Do you seriously expect criminals are dumb enough to leave any useful information there?
Re: WannaCry – New Variants Detected
#10Maybe it would be better to wait until the attackers registered the domain, then sopoeana the registrair for their account info.
I suppose that might be interesting just to see if they're stupid enough to register with traceable info.