Another Ransomware Outbreak Is Going Global
101–110 of 435 posts
Re: Another Ransomware Outbreak Is Going Global
#102Can someone provide a simple (but not overly so) explanation of how the current generation of ransomware operate i.e., A) spread and B) lock up the computer? Does it always require human intervention for A. ? Thank you.
There are indications that this new version uses a number of ways to spread. Where attacker == the ransomware executable: First is the EternalBlue exploit developed by and leaked from the NSA. EternalBlue exploits a flaw in Windows systems on port 445 TCP that can be used to take complete control of an unpatched system. So if an attacker can connect to a vulnerable Windows machine on port 445 tcp they can take contro…
Source:https://www.us-cert.gov/ncas/alerts/TA17-132A
"Once the malware starts as a service named mssecsvc2.0, the dropper attempts to create and scan a list of IP ranges on the local network and attempts to connect using UDP ports 137, 138 and TCP ports 139, 445. If a connection to port 445 is successful, it creates an additional thread to propagate by exploiting the SMBv1 vulnerability documented by Microsoft Security bulliten MS17-010."
Re: Another Ransomware Outbreak Is Going Global
#103Earlier quoted context omitted.
Probably via their smart phones
So a smartphone is not a computer anymore? The world we live in..
Re: Another Ransomware Outbreak Is Going Global
#104Earlier quoted context omitted.
Call me paranoid but I consider even a clean, freshly installed and fully updated Windows PC already compromised by the NSA.
This is absurd nonsense, but my viewpoint is a lonely one on HackerNews.
Re: Another Ransomware Outbreak Is Going Global
#105Earlier quoted context omitted.
it seems like a trivially avoidable mistake to use a single wallet for all collections, but maybe i shouldn't be giving them ideas...
Why do you think it a mistake?
If every address was different we'd have no idea how much money they're making and only funds paid by people who also reported them would be tainted by the long eyeball of the law.
Re: Another Ransomware Outbreak Is Going Global
#106As someone affected by the ransomware - did anyone else notice empty console windows popping up from time to time the days before the ransomware triggered the encryption?
This is most likely due to the Office bug: https://www.digitaltrends.com/computing/here-is-a-fix-for-mi...
Re: Another Ransomware Outbreak Is Going Global
#107Re: Another Ransomware Outbreak Is Going Global
#108A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...
I like one of the more recent transactions: https://blockchain.info/tx/82698e1f2fbf31914019da738e24515ae... For 0.0000666 BTC. Sender is theoretically 1 FuckYou RJBmXYF29J7dp4mJdKyLyaWXW6
Re: Another Ransomware Outbreak Is Going Global
#109i said this before and it was met with mostly hostility, but im still wondering... bitcoin has enabled ransomware, so its a boon to crooks. what has it done for non-crooks? i dont mean conceptually (no fed! decentralized! etc. etc.), i mean since its come into being, what has it done for you personally? for me: i bought a vpn subscription, anonymously. probably not able to do that as easily without btc. but, i would…
Bitcoin should exist for the same reasons Tor exists. Just because Tor is used by child predators and of little practical use to the average Western citizen doesn't negate its positive value.
Re: Another Ransomware Outbreak Is Going Global
#110A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...
What a clickbait headline. A paltry $3k and yet the article calls this a "MASSIVE ransomware outbreak". I would be curious to see what a "minor" outbreak is.