Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by dhimes on Friday May 12, 2017 @03:40PM (#14327198)

Are we watching this thing wake up right now?

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by devrandomguy on Friday May 12, 2017 @03:51PM (#14327327)

We are seeing new requests from existing bots, the historical data is not shown on this map.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by dhimes on Friday May 12, 2017 @03:58PM (#14327389)

Gotcha. So yeah, we're seeing it wake up. The first little increase (up to 600) was about the time the article was published.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by knowaveragejoe on Friday May 12, 2017 @04:22PM (#14327565)

Where are you seeing this? This isn't historical data.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by squeaky-clean on Friday May 12, 2017 @04:29PM (#14327629)

Here's a page with more info

https://intel.malwaretech.com/botnet/wcrypt

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by dhimes on Saturday May 13, 2017 @08:07AM (#14330530)

Yeah it scrolls off to the left. So you came an hour after my comment and it was gone. Heck it was almost gone by my second comment.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by jdironman on Friday May 12, 2017 @04:04PM (#14327433)

If so, that is both scary and exciting.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by brilliantcode on Friday May 12, 2017 @04:21PM (#14327550)

it took me a while to realize this is live....

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by jdironman on Friday May 12, 2017 @08:38PM (#14329002)

I am curious. How is this tracked? What signature or what component are they looking for to be able to say "Yeah, here is another one"?

I'm just curious and would like someone with more experience to weigh in.

EDIT: To add on further to my question, I wonder why it does not use a terrain / city / province overlay instead of all black? It seems it would be much more useful to us network and sysadmins out there just in case we realized "Oh, hey that dot is right on top of where we work out of. I should probably fire up WireShark or something and test for infected systems."

[ Parent | on HN ]