https://malgregator.com/tags/wannacry/ Recent content in WannaCry on malgregator Hugo -- gohugo.io en you@example.com you@example.com Thu, 01 Feb 2018 22:20:00 +0000 https://malgregator.com/post/week-05-2018/ Thu, 01 Feb 2018 22:20:00 +0000 you@example.com https://malgregator.com/post/week-05-2018/ A.P. Moller–Maersk Group, the world's largest container shipping company, reinstalled 45000 PCs and 4000 Servers to recover from the NotPetya ransomware attack. https://malgregator.com/post/week-51-2017/ Thu, 28 Dec 2017 14:58:00 +0000 you@example.com https://malgregator.com/post/week-51-2017/ There is a remotely exploitable vulnerability in the Vitek CCTV firmware. Reverse netcat shell included. https://malgregator.com/post/week-43-2017/ Wed, 01 Nov 2017 22:57:00 +0000 you@example.com https://malgregator.com/post/week-43-2017/ Researchers from the Masaryk University finally published full paper of the practical cryptographic attack against the implementation of RSA in the widely used trusted platform modules / crypto tokens. 'The Return of Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli' https://malgregator.com/post/week-22-2017/ Mon, 05 Jun 2017 22:22:00 +0000 you@example.com https://malgregator.com/post/week-22-2017/ Notoriously known Gh0st RAT spyware is spreading through the same SMB vulnerability as a WannaCry ransomware. https://malgregator.com/post/week-21-2017/ Mon, 29 May 2017 21:00:00 +0000 you@example.com https://malgregator.com/post/week-21-2017/ Check Point researchers revealed a new attack vector using malicious subtitle files, which, when downloaded by a victim’s media player, can provide complete control over any type of device via vulnerabilities found in many popular streaming platforms, including VLC, Kodi (XBMC), Popcorn-Time and strem.io. https://malgregator.com/post/week-20-2017/ Sun, 21 May 2017 21:00:00 +0000 you@example.com https://malgregator.com/post/week-20-2017/ Researchers published WannaCry ransomware decryption tool for older Windows (XP, 2003, 7). It uses bug in the Windows Crypto API which does not immediately erase private key. The application is crawling the computer memory, looking for the prime numbers which can divide the public key used for the encryption. https://malgregator.com/post/week-19-2017/ Tue, 16 May 2017 22:50:00 +0000 you@example.com https://malgregator.com/post/week-19-2017/ You have probably heard about the WannaCry/WannaCrypt/WannaWhatever worm spreading ransomware, because of the sensation created by parties profiting from the scare tactics. But also because it is using really good spreading technique - exploiting MS17-010 SMB vulnerability leaked from the NSA. Some post-mortem analysis of the first version (with the killswich) and TheShadowBrokers blog are listed below. Crypto is working, so no trivial decrypter is probable, except if the keys are published.