41–50 of 164 posts
Reminds me of the Archer episode where Cyril plants the computer virus and was going to be the hero by "fixing" it.
These systems would be better of security wise if they would use the latest open source operating system including the embedded code. The damage this will cause to embedded systems is distasteful.
AIUI they would have been better off if they'd used the latest of any operating system.
How does 'Patient A' get wcry2? Phishing? Via internet facing open 445/3389?
The original authors first released it with their own bitcoin address. It then spreads p2p around the world wherever it can to front-facing PCs.
Then 3rd-party spearfishers are sending it to corporate networks with their own bitcoin address so they can get the credit for getting past/through firewalls.
Who is doing this knowing fully well that GHCQ , FBI and possibly even the NSA are hard at work trying to get them ? These people are going down . No doubt about it.
Just from my limited experience of "being alive in the USA for 30-something odd years".. I don't think anyone is hard at work trying to get anyone. If you actually ever get the attention of the NSA/CIA - you don't get "caught" or ever make it to the news(except in gaffe's like snowden/assange, we weren't supposed to find out about them). They want us to forget about you, while you either rot in a dungeon(forever) or…
Seriously, this cat's already out of the ba. There's nothing to be gained by trying to bury it, and making the consequences clear might reduce the likelihood of a repeat.
Just wait until this hits the files of a Russian mob who then take some Americans hostage and fly to China and end up entangled in an islamic terrorist plot. 'Cause then we're in for a very long and drawn out story involving MI6, the CIA, Canadian smuggling routes, and Christian Isolationist 2nd Amendment fanatics.
Could I purchase the movie rights to that? Could seriously make a good mini-series if done seriously. Ala John Le Carré.
Earlier quoted context omitted.
The initial attack vector is via an email attachment. Once it's infected a host, the SMB scanning for vulnerable hosts is launched and secondary infections begin with no further user action required.
> The initial attack vector is via an email attachment. So far it seems an hypothesis and nobody has shown such an email attachment, which is strange considering all the systems out there which save and archive attachments. Especially hospitals and gov't sites saves it all.
Why would they keep releasing it, and release it in the first place, with such a simple kill-switch. Doesn't make much sense. Reminds me of the Archer episode where Cyril plants the computer virus and was going to be the hero by "fixing" it.
Why would they keep releasing it, and release it in the first place, with such a simple kill-switch. Doesn't make much sense. Reminds me of the Archer episode where Cyril plants the computer virus and was going to be the hero by "fixing" it.