11–20 of 164 posts
Maybe it would be better to wait until the attackers registered the domain, then sopoeana the registrair for their account info.
Maybe it would be better to wait until the attackers registered the domain, then sopoeana the registrair for their account info.
Do you seriously expect criminals are dumb enough to leave any useful information there?
Nobody is smart at everything 100% of the time.
How does 'Patient A' get wcry2? Phishing? Via internet facing open 445/3389?
From what I've read, initial attack vector is still not known for sure. Spear phishing seems to be the current best hypothesis. I don't think anyone's seen a mass phishing campaign. See: https://arstechnica.com/security/2017/05/an-nsa-derived-rans...
Once it's infected a host, the SMB scanning for vulnerable hosts is launched and secondary infections begin with no further user action required.
Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ? These people are going down . No doubt about it.
Definitely, would not like to be them.
Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ? These people are going down . No doubt about it.
I think you vastly overstate this. While I can't speak to GHCQ, I really don't think NSA has a charter to pursue justice. The FBI may be, but I'm just not convinced they will move quick enough to matter (they do move, but only against a large established organization).
Just wait until this hits the files of a Russian mob who then take some Americans hostage and fly to China and end up entangled in an islamic terrorist plot. 'Cause then we're in for a very long and drawn out story involving MI6, the CIA, Canadian smuggling routes, and Christian Isolationist 2nd Amendment fanatics.