Criminals used leaked NSA cyberweapon in crippling ransomware attack, experts say

This new development in the story is scary enough for the front page, I think.

They say you're OK if you're updated though.

University of Calgary paid $20k to the criminals. Idiots.

Can't wait to see the long list of attacks they'll be subjected to after this.

That's exactly what the criminals are expecting, lots will just roll over and pay it.

The Health Service in the UK seems to have been whacked pretty hard,
they went after private medical files.

Microsofts security patch that came two months ago could have saved the people from this if they had updated

Lots of the computers were running XP, no patch for them.

Update your shit folks.


It's either that or lose everything and cost yourself millions. If they can't break the encryption, they're fucked. Bad work on the IT boys not having backups to revert to.

a good leason for all to protect yourself better in future

Anonymous British blogger becomes accidental hero by putting brakes on global cyber attack for just �8 as 'atom bomb of malware' cripples NHS, halts car production and hits more than 100 countries

UK blogger, 22, 'accidentally' found method to block spread of cyber attack
He found way to register virus as a website which caused a 'kill switch'
But he warned the code could be changed and urged users to update systems
'Unprecedented' attack has crippled the NHS and cancelled operations
Home Secretary unable to confirm whether any patient files have been lost
More than 130,000 infections have been detected across 100 countries
Experts say affected computers being used as 'zombies' to spread virus and the attack could be 'only just beginning' with fears of a second wave

By Joseph Curtis For Mailonline

Read more: http://www.dailymail.co.uk/news/article ... z4gySCjSWo

A new version appeared almost as soon as their C&C domain got usurped by that Anon do-gooder. They also noticed the ransomers used only 3 bitcoin wallets, so they have no way to know whether people actually paid the ransom. Usually ransomers use one wallet per hijack, so they know if you paid or not, and its still untraceable.

One of the security sites I visit often had an experimental honeypot that got attacked 7 times in 90 minutes of appearing on the web unprotected.

Today will be an interesting day. I for one, embrace the chaos!

I just no more hospitals get affected by this ransomware

I've said for years that critical infrastructure should have no access to the Internet.

People just half ass the protection, and there's no need to log on to Facebook while they are at work.

I've said for years that critical infrastructure should have no access to the Internet.

People just half ass the protection, and there's no need to log on to Facebook while they are at work.
I raised this issue in one of my classes with the want to have centralized data for medical records. Just asking for trouble from inept administrations.

I'm less worried about inept management than I am the deliberately malicious bastards who award contracts to their friends or to people they favor politically. Even worse are the fad followers who think that pursuing the latest fads in tech will make people see them as 'smart'.

Can't tell you how many managers I've humiliated over the past five or six years who've been trumpeting "the cloud" in a meeting only to have me ask them if they know what the cloud is.

So far have gotten the answer right.

I'm less worried about inept management than I am the deliberately malicious bastards who award contracts to their friends or to people they favor politically. Even worse are the fad followers who think that pursuing the latest fads in tech will make people see them as 'smart'.

Can't tell you how many managers I've humiliated over the past five or six years who've been trumpeting "the cloud" in a meeting only to have me ask them if they know what the cloud is.

So far have gotten the answer right.
I'd imagine the same type of people that insist on having macs in their enterprise environment.