Linked Questions

26
votes
3answers
35k views

Does WannaCry infect Linux? [duplicate]

After reading this question, now, I am wondering if WannaCry malware can infect Linux OS especially Ubuntu. One of the answers talked about SMB2 and windows. Does it mean a Linux based computer is ...
1
vote
1answer
743 views

How can we beef the security of our Windows Server 2012 R2 against ransomware? [duplicate]

We have a MS Windows Server 2012 installed. After the attacks of last week, I was wondering how we could improve the security of the server against ransomware/cryptoware. We did install the latest ...
-2
votes
2answers
237 views

is there any solution for wannacry? [duplicate]

"wanna cry" encrypt our data within a minute. So how can they do it that much faster speed on network?? Is my file encrypted by "wanna cry" then any way to decrypt my file without sending bitcoins to ...
15
votes
4answers
5k views

Has anybody successfully decrypted their files after paying the WannaCrypt ransom?

WannaCrypt is a shot heard 'round the world, for sure. I have seen news articles saying that people have paid more than $20,000 in ransoms. Here's one from Krebs: Global ‘Wana’ Ransomware Outbreak ...
5
votes
3answers
18k views

Find SMBv1 status with Nmap

Is there a ready way with nmap's scripting option to find machines with SMB 1 still enabled server side? It'd be a whole lot faster for me to monitor my remediation if it is available. I'd rather ...
8
votes
3answers
12k views

Is it risky to allow SMB traffic to the Internet

SMB is a well-known network file sharing protocol, and I assume it's supposed to be used internally only. At my company I found someone connecting to a share on a server on the Internet over port 445 ...
1
vote
5answers
12k views

Will Running MEMZ or Wanna Cry in VirtualBox Harm Host Computer?

I have read some threads talking about the safety of running malware in a VM. I found out that it may not be safe and there is still a risk. I would like to know specifically if running Wanna Cry, a ...
1
vote
3answers
957 views

What do emails have to do with the spread of WannaCrypt?

After the recent spread of WannaCrypt, there has been a lot of warnings about the dangers of emails and clicking on links in them. But the malware is spreading as a worm using SMB to infect other ...
9
votes
2answers
1k views

What harm is there in obtaining password hashes in a Windows environment?

ArsTechnica posted this article recently talking about how the power grid has been penetrated: Hackers lie in wait after penetrating US and Europe power grid networks Excerpt: One tactic involved ...
5
votes
2answers
538 views

Does EMET prevent WannaCry exploit execution?

Based on answers to the question How is the “WannaCry” Malware spreading (...), I understand it leverages vulnerabilities present in the SMB implementation. Assuming an unpatched and otherwise ...
2
votes
1answer
2k views

WannaCry - block callback IP/domain?

While new variants of Wannacry has sprung up, the old variant is still lurking around corners and I am not sure whether the following callback IPs and domains should be blocked as per typical ...
2
votes
1answer
717 views

Is WannaCry Proxy Aware?

I read the Article of WannaCry on malwaretech.com and as far I understand it works like this: Try to connect via HTTP to www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com if it got an response then ...
-9
votes
2answers
422 views

WannaCrypt-style SMB exploits known since Stuxnet, circa 2008, but Microsoft hid fixes from us. So what is new now? [closed]

WannaCrypt-like SMB spreading technique was widely used in Stuxnet, as docummented by Symantec and Kaspersky. Read this: W32.Stuxnet Dossier (2010,Symantec PDF) Now we have the name of the exploit: ...
0
votes
2answers
192 views

Will my 445 port still exposed when I connect a windows machine to my android phone's hotspot/tethering nerwork?

From 2016.05.12, the EternalBlue exploit attacks the 445 port vulnerability in windows systems worldwide, Will my 445 port still exposed if I connect windows machine to the Internet by an android ...