WannaCry One Year Later: Looking Back at a Milestone
This blog was written by Grant Bourzikas, previous CISO at McAfee. Has it been a year? It seems longer. When the WannaCry ransomware attack hit tens of thousands of individuals and business around the world on May 12, 2017, it wasn’t the first time we had seen ransomware, but its ...
McAfee Labs Threats Report Explores WannaCry/Petya, Threat Hunting, Script-Based Malware
Today we published the McAfee Labs Threats Report: September 2017. This quarter’s report shows off a new design. We hope you will find it attractive as well as informative.
Petya is Here, And It’s Taking Cues from WannaCry
Just over a month after the infamous WannaCry attack, a new worldwide cyberattack is here again. Its name is Petya, or Petwrap, it’s hit companies everywhere across Europe, including Ukraine’s government facilities, electric grids, banks, and public transportation, demanding a $300 ransom in Bitcoin in the process. So how does this Petya attack work, exactly? Going ...
Is WannaCry Really Ransomware?
Ransomware follows a relatively simple model: data is encrypted, the victim pays, data is decrypted. At least that is what those who create ransomware want you to believe. This was also our assumption when we began our analysis of WannaCry—that those behind the campaign would decrypt victims’ data once they ...
Fake WannaCry Protection Apps Hit the Google Play Store
WannaCry was the ransomware attack heard around the world. It impacted more than 150 countries and infected over 250,000 devices running Windows programs. It didn’t, however, affect devices running Android software. But that’s not what some app developers want you to believe, as rogue WannaCry ‘protectors’ have begun to offer ...
Fake WannaCry ‘Protectors’ Emerge on Google Play
Are Android devices affected by the self-propagating ransomware WannaCry? No—because this threat exploits a vulnerability in Microsoft Windows. This malware cannot harm mobile systems. Nonetheless, some developers are taking advantage of the uproar and possible confusion to promote apps that promise to protect Android devices. While searching for “WannaCry” on ...
WannaCry: When the Theoretical Becomes Real
This blog was written by Brian Dye. I’ve spent many years talking to audiences – corporate customers, government leaders, and everyday people – about cyberthreats both real and possible. But what happened over last weekend with the “WannaCry” threat feels like a point at which “future threats” become “now threats” ...
How to Protect Against WannaCry Ransomware in a McAfee Environment
WannaCry is a ransomware family targeting Microsoft Windows. On Friday May 12, a large cyberattack based on this threat was launched. At this time, it is estimated that more than 250,000 computers in 150 countries have been infected, each demanding a ransom payment.
Adylkuzz CoinMiner Spreading Like WannaCry
The last few days have been very busy for security teams all around the globe due to the nasty ransomware WannaCry, which spread widely using an exploit for a Server Message Block v1 vulnerability (MS17-010) leaked by the ShadowBroker team a few weeks ago. We have reported on this malware ...
How a Young Cybersecurity Researcher Stopped WannaCry Ransomware in Its Tracks
Last Friday, the biggest ransomware attack we’ve seen hit organizations everywhere, impacting more than 150 countries. It shut down a good chunk of Britain’s National Health Service, has earned the attackers $55,000 in bitcoin, and unfortunately, might not be done just yet. However, there’s good news—“WannaCry” is in fact slowing ...
