Malwarehigh
Wannacry, the hybrid malware that brought the world to its knees. Let’s not forget!
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0144 | Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices | 8.8 | 99% | KEVRansomwarePoC ×6 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | rified that a public site was in fact non-existent: “hxxp://www[.]iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea[.]com” Only the registration of this domain subsequently crea |
| url | http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com” | was verified that a public site was in fact non-existent: “hxxp://www[.]iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea[.]com” Only the registration of this domain subsequently creat |
From the original article
5 min read at securityaffairs.com
Reflecting on the Wannacry ransomware attack, which is the lesson learnt e why most organizations are still ignoring it. In the early afternoon of Friday 12 May 2017, the media broke the news of a global computer security attack carried out through a malicious code capable of encrypting data residing in information systems and demanding a ransom in cryptocurrency to restore them, the Wannacry ransomware .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.