Another Ransomware Outbreak Is Going Global • Hacker News Board

Re: Another Ransomware Outbreak Is Going Global

#81

Post by cm2187 » Tue, Jun 27, 2017, 4:23 PM UTC

strictnein wrote: post #44

mighty_warrior wrote: post #22

Your own fault if you didnt patch out eternalblue. No sympathy for hacked orgs.

Also uses a client side exploit in Word/Wordpad, although that was patched earlier this month: https://portal.msrc.microsoft.com/en-US/security-guidance/ad...

Moronic design of the microsoft page. It requires you to acknowledge some bullshit T&C on first visit, then redirects you to the website home page. Which means that someone clicking on the CVE to check if there is anything important will be redirected to a home page with no information. Most sane people will go back to the original link, but if there were only sane people in this world, this second wave of malware would be toothless. That's not exactly helping awareness of the vulnerability.

Re: Another Ransomware Outbreak Is Going Global

#82

Post by spacemanmatt » Tue, Jun 27, 2017, 4:23 PM UTC

rsync wrote: post #61

jannes wrote: post #50

This is even more proof how powerful a 0-day in the wrong hands can be. All of the affected companies' should be considered compromised by the NSA. Actually, every single Windows PC with an internet connection that has been used before March 14 should be considered irrevocably compromised. Ransomware is much more visible than spyware. Think about all the spyware-infected PCs/networks that nobody knows about.

"Actually, every single Windows PC with an internet connection that has been used before March 14 should be considered irrevocably compromised." March 14 of what year ? I would say 2000 but I am open to discussion ...

I sent my first packet-of-death to an unprotected Windows machine in 1996, so...

Re: Another Ransomware Outbreak Is Going Global

#83

Post by gmisra » Tue, Jun 27, 2017, 4:25 PM UTC

Is anyone aware of an entity that attempts to objectively quantify the economic impact of an event like this (ransoms paid, data lost, labor hours lost, new security costs, etc)?

Re: Another Ransomware Outbreak Is Going Global

#84

Post by dz0ny » Tue, Jun 27, 2017, 4:25 PM UTC

Public analysis is tracked here https://otx.alienvault.com/pulse/59525e7a95270e240c055ead/

Seems that payload servers are in Germany, France, and Malaysia.

https://securelist.com/petrwrap-the-new-petya-based-ransomwa...

Re: Another Ransomware Outbreak Is Going Global

#85

Post by rahkiin » Tue, Jun 27, 2017, 4:25 PM UTC

hsod wrote: post #59

SpeakMouthWords wrote: post #58

Earlier quoted context omitted.

How do they plan on contacting the employees en masse if the computer is off?

Probably via their smart phones

So a smartphone is not a computer anymore? The world we live in..

Re: Another Ransomware Outbreak Is Going Global

#86

Post by franciskim » Tue, Jun 27, 2017, 4:31 PM UTC

mbaha wrote: post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

Thanks for the address, I made a live counter here: https://franciskim.co/petya-ransomware-live-counter-ransom-d...

Refreshes every 2 seconds.

Re: Another Ransomware Outbreak Is Going Global

#87

Post by holtalanm » Tue, Jun 27, 2017, 4:31 PM UTC

mbaha wrote: post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

Update: Over $4000 now

Re: Another Ransomware Outbreak Is Going Global

#88

Post by ccozan » Tue, Jun 27, 2017, 4:32 PM UTC

rahkiin wrote: post #85

hsod wrote: post #59

Earlier quoted context omitted.

Probably via their smart phones

So a smartphone is not a computer anymore? The world we live in..

I think is a matter of semantics, not of functionality. A smartphone is a computer per design, but no one is calling it like that.

Re: Another Ransomware Outbreak Is Going Global

#89

Post by wybiral » Tue, Jun 27, 2017, 4:32 PM UTC

strictnein wrote: post #53

mbaha wrote: post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

I like one of the more recent transactions: https://blockchain.info/tx/82698e1f2fbf31914019da738e24515ae... For 0.0000666 BTC. Sender is theoretically 1 FuckYou RJBmXYF29J7dp4mJdKyLyaWXW6

The only other transaction that account has made was to one of the WannaCry addresses. Also a tiny amount.

Re: Another Ransomware Outbreak Is Going Global

#90

Post by BoiledCabbage » Tue, Jun 27, 2017, 4:33 PM UTC

semi-extrinsic wrote: post #49

mrb wrote: post #28

Earlier quoted context omitted.

What a clickbait headline. A paltry $3k and yet the article calls this a "MASSIVE ransomware outbreak". I would be curious to see what a "minor" outbreak is.

In Ukraine, banking services nationwide as well as credit card payments on the metro in Kiev, and the airport IT systems, are all down. At what point do we call it massive? When US banks and airports start having trouble?

That's interesting. I've heard a lot about Russia testing out cyberwarfare in Ukraine as a possible proving ground for future targets. Was Ukraine the hardest hit by this latest one?

It'd be interesting if this were actually made to take down infrastructure under the guise of ransomware.