Live data from Hacker News

Another Ransomware Outbreak Is Going Global

forbes.com

101–110 of 435 posts

Re: Another Ransomware Outbreak Is Going Global

#101
i said this before and it was met with mostly hostility, but im still wondering... bitcoin has enabled ransomware, so its a boon to crooks. what has it done for non-crooks? i dont mean conceptually (no fed! decentralized! etc. etc.), i mean since its come into being, what has it done for you personally? for me: i bought a vpn subscription, anonymously. probably not able to do that as easily without btc. but, i would personally trade that for not having ransomware attacks. thoughts?

Re: Another Ransomware Outbreak Is Going Global

#102
post #94
post #75

Can someone provide a simple (but not overly so) explanation of how the current generation of ransomware operate i.e., A) spread and B) lock up the computer? Does it always require human intervention for A. ? Thank you.

There are indications that this new version uses a number of ways to spread. Where attacker == the ransomware executable: First is the EternalBlue exploit developed by and leaked from the NSA. EternalBlue exploits a flaw in Windows systems on port 445 TCP that can be used to take complete control of an unpatched system. So if an attacker can connect to a vulnerable Windows machine on port 445 tcp they can take contro…

Actually, I believe phishing / malicious attachment was debunked as the infection vector. Subsequent research found that WC starts scanning hosts and IP's on port 445 to try to find other machines to infect.

Source:https://www.us-cert.gov/ncas/alerts/TA17-132A

"Once the malware starts as a service named mssecsvc2.0, the dropper attempts to create and scan a list of IP ranges on the local network and attempts to connect using UDP ports 137, 138 and TCP ports 139, 445. If a connection to port 445 is successful, it creates an additional thread to propagate by exploiting the SMBv1 vulnerability documented by Microsoft Security bulliten MS17-010."

Re: Another Ransomware Outbreak Is Going Global

#103
post #85
post #59

Earlier quoted context omitted.

Probably via their smart phones

So a smartphone is not a computer anymore? The world we live in..

My calculator's a computer, but I don't call it that. My game systems are all computers, but I don't call them that either (and never have, unless I was discussing semantics).

Re: Another Ransomware Outbreak Is Going Global

#104

Earlier quoted context omitted.

Call me paranoid but I consider even a clean, freshly installed and fully updated Windows PC already compromised by the NSA.

This is absurd nonsense, but my viewpoint is a lonely one on HackerNews.

You're not the only one who thinks the idea of wearing a tin foil hat when you use Windows because the NSA only knows how to attack Windows is demeaning to the intelligence of other tin foil hat wearers.

Re: Another Ransomware Outbreak Is Going Global

#105
post #31

Earlier quoted context omitted.

it seems like a trivially avoidable mistake to use a single wallet for all collections, but maybe i shouldn't be giving them ideas...

Why do you think it a mistake?

Because now we can watch those funds and know how much money they made, we can watch them to see if they make a mistake.

If every address was different we'd have no idea how much money they're making and only funds paid by people who also reported them would be tainted by the long eyeball of the law.

Re: Another Ransomware Outbreak Is Going Global

#106
post #32
post #25

As someone affected by the ransomware - did anyone else notice empty console windows popping up from time to time the days before the ransomware triggered the encryption?

This is most likely due to the Office bug: https://www.digitaltrends.com/computing/here-is-a-fix-for-mi...

this was really annoying

Re: Another Ransomware Outbreak Is Going Global

#108
post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

I like one of the more recent transactions: https://blockchain.info/tx/82698e1f2fbf31914019da738e24515ae... For 0.0000666 BTC. Sender is theoretically 1 FuckYou RJBmXYF29J7dp4mJdKyLyaWXW6

Similarly, with regards to 666ing: https://www.reddit.com/r/SheepMarketplace/comments/1rvlft/i_...

Re: Another Ransomware Outbreak Is Going Global

#109

i said this before and it was met with mostly hostility, but im still wondering... bitcoin has enabled ransomware, so its a boon to crooks. what has it done for non-crooks? i dont mean conceptually (no fed! decentralized! etc. etc.), i mean since its come into being, what has it done for you personally? for me: i bought a vpn subscription, anonymously. probably not able to do that as easily without btc. but, i would…

Depends on where you live. I doubt you'd have faced any repercussions for buying that VPN subscription with your credit card, but the governments of other countries might not be so understanding.

Bitcoin should exist for the same reasons Tor exists. Just because Tor is used by child predators and of little practical use to the average Western citizen doesn't negate its positive value.

Re: Another Ransomware Outbreak Is Going Global

#110
post #28
post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

What a clickbait headline. A paltry $3k and yet the article calls this a "MASSIVE ransomware outbreak". I would be curious to see what a "minor" outbreak is.

Amount of money collected != scale of attack. Number of machines + importance of companies/systems = scale of attack.
Post reply on HN