looks like the world is being attacked by a very serious Ransomware virus.

so far UK, US, China, Russia, Spain and many more data's being hold to Ransom. its called WannaCry. and affects windows computers.

The infections seem to be deployed via a worm - a program that spreads by itself between computers.

Most other malicious programmes rely on humans to spread by tricking them into clicking on an attachment harbouring the attack code.

By contrast, once WannaCry is inside an organisation it will hunt down vulnerable machines and infect them too.

Some experts say the attack may have been built to exploit a weakness in Microsoft systems that had been identified by the NSA and given the name EternalBlue.

http://www.bbc.co.uk/news/technology-39901382

 

[Joom]

1. oh now I see, So if we on Windows keep all our data on another drive, then the ransomware is practically useless!?

Maybe. Depends on how dumb the developers are. If the malware is hardcoded to only work with C:\, then sure, keeping data on D:\ or whatever would be fine. Though if it searches for other drives that use the Windows mount scheme (reason why this won't affect *nix outside of Wine) then it wouldn't make a difference.

 

[NintendU_the_great]

Windows mount scheme (reason why this won't affect *nix outside of Wine)

I'm confused again...
How does Wine not follow the Windows mount scheme?

 

[Joom]

I'm confused again...
How does Wine not follow the Windows mount scheme?

It does. That's what I meant about it not being able to affect anything outside of Wine.

 

[NintendU_the_great]

It does. That's what I meant about it not being able to affect anything outside of Wine.

I meant outside of Wine. Wine mounts stuff outside of wine as a spereate disk, so isn't that the windows mount scheme?

 

[Joom]

I meant outside of Wine. Wine mounts stuff outside of wine as a spereate disk, so isn't that the windows mount scheme?

No it doesn't. Wine keeps everything within its prefix. The drives it emulates are all within the prefix you set, or ~/.wine/dosdevices by default.

 

[NintendU_the_great]

No it doesn't. Wine keeps everything within its prefix. The drives it emulates are all within the prefix you set, or ~/.wine/dosdevices by default.

oh. I havent used Wine for 2 years, so i dont remember much

 

[PrincessLillie]

So... The ransomware was updated to version 2.0... And leaks state that it will start targeting Linux and Android...

You can see the spread of the malware live here. (Don't worry, it's safe.)

SOURCE

 

[AsPika2219]

Look likes WANNACRY was attacked my country, MALAYSIA right now!!!! Here the website! Just attacked 2 company right now.

http://www.thestar.com.my/news/nati...rt-first-organisation-infected-last-saturday/

Stupid ransomware..... You make me WANNA CRY.........

 

[Joom]

So... The malware was updated to version 2.0... And leaks state that it will start targeting Linux and Android...

You can see the spread of the malware live here. (Don't worry, it's safe.)

SOURCE

"Leaks"? Alright, sure. Regardless, what made this newsworthy was the fact that it was piggybacking off of a dangerous Windows exploit. Now that that's not the case I couldn't care any less as this is just another run-of-the-mill ransomware.

 

[PrincessLillie]

"Leaks"? Alright, sure. Regardless, what made this newsworthy was the fact that it was piggybacking off of a dangerous Windows exploit. Now that that's not the case I couldn't care any less as this is just another run-of-the-mill ransomware.

Well, according to my source, this update has no killswitch.

 

[sarkwalvein]

Well, according to my source, this update has no killswitch.

That was news two days ago.

 

[StarTrekVoyager]

What's stupid is that the exploit was patched TWO FREAKIN' MONTHS ago. On Windows 7, Windows 8.1 AND Windows 10. The fact that it managed to spread worries me about the intelligence of most computer users around the world.

 

[sarkwalvein]

What's stupid is that the exploit was patched TWO FREAKIN' MONTHS ago. On Windows 7, Windows 8.1 AND Windows 10. The fact that it managed to spread worries me about the intelligence of most computer users around the world.

What shows that the biggest Windows security hole..... are their users.

 

[PrincessLillie]

What's stupid is that the exploit was patched TWO FREAKIN' MONTHS ago. On Windows 7, Windows 8.1 AND Windows 10. The fact that it managed to spread worries me about the intelligence of most computer users around the world.

Don't forget Windows XP.

That was news two days ago.

SORRY! I don't get on Gamebanana (my source) much anymore. It was new to me.

 

[Joom]

Well, according to my source, this update has no killswitch.

Neither do most other ransomware. Let me know if this is leveraging a 0day in Android/Linux. Then I'll be interested. Anyway, if someone comes across a sample PM it to me.

 

[PrincessLillie]

Neither do most other ransomware. Let me know if this is leveraging a 0day in Android/Linux. Then I'll be interested. Anyway, if someone comes across a sample PM it to me.

Well, that's most other ransomware. This one is MUCH different. It has devastated the world. My source says nothing on the date for Linux and Android, but I would guess Soon™. Must be good to be a Chrome OS user right now. (I don't use Chrome OS.)

 

[Joom]

Well, that's most other ransomware. This one is MUCH different. It has devastated the world. My source says nothing on the date for Linux and Android, but I would guess Soon™. Must be good to be a Chrome OS user right now. (I don't use Chrome OS.)

ChromeOS is Linux. The reason why this one was so devastating was because people fail to keep their computers up to date. Generally speaking this was honestly overly hyped, but I guess "the ignorance of thousands fucked up their computers" isn't as great or scary of a headline.

 

[sarkwalvein]

Well, that's most other ransomware. This one is MUCH different. It has devastated the world. My source says nothing on the date for Linux and Android, but I would guess Soon™. Must be good to be a Chrome OS user right now. (I don't use Chrome OS.)

But it has "devastated" the world because it was able to spread without user interaction thanks to a day zero exploit on the Windows SMB implementation paired together with clueless users that didn't update Windows for two full months.
Now the clueless users should not be clueless anymore, and save for the irresponsible ones their Windows versions should be updated.
Linux and Android are not vulnerable to this exploit from the start either.

So now, without that capability, this ransomware is irrelevant.

 

[AsPika2219]

Here the list of countries was inflected with stupid Wcrpt (WannaCry or WannaCrypt)

https://intel.malwaretech.com/botnet/wcrypt/?t=24h&bid=all

 

[NintendU_the_great]

But it has "devastated" the world because it was able to spread without user interaction thanks to a day zero exploit on the Windows SMB implementation paired together with clueless users that didn't update Windows for two full months.
Now the clueless users should not be clueless anymore, and save for the irresponsible ones their Windows versions should be updated.
Linux and Android are not vulnerable to this exploit from the start either.

So now, without that capability, this ransomware is irrelevant.

true.
nice signature