Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by mdkdog on Friday May 12, 2017 @05:51PM (#14328227)

It looks to me like common stupidity...people opening attachments that they should not be opening. No need to involve CIA NSA or other tree letters agency hacking tool...just old school phishing. I see this happening much to often....people opening *.pdf.js attachment. No need for another conspiracy theory...stupidity explains it all. Just my 50¢.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by robertfw on Friday May 12, 2017 @06:09PM (#14328318)

It looks like you have not done any "looking" at this at all. This is a worm that is using the ETERNALBLUE (and possibly other) exploits to infect all vulnerable machines on a network without user interaction

plenty of stupidity for sure, but the stupidity is at the number of unpatched systems

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by mdkdog on Friday May 12, 2017 @06:34PM (#14328485)

My bad...the article is not really clear thou... My first comment...and my first fail... /me sad!

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by hoschicz on Friday May 12, 2017 @06:12PM (#14328332)

It doesnt involve only pdf.js file, the key is a bug in samba that means that all you need to get infected is to connect to an infected network.

[ Parent | on HN ]

Re:Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hack... by toyg on Friday May 12, 2017 @06:24PM (#14328414)

Not in Samba, in the SMB protocol implementation on Windows.

Samba servers are safe.

[ Parent | on HN ]