News for hackers. Stuff that matters.

A comment on Accidentally Stopping a Global Cyber Attack. Parent comment

Re:Accidentally Stopping a Global Cyber Attack by 300bps on Saturday May 13, 2017 @02:53PM (#14332389)
Many sandbox environments resolve whatever they're queried for with the same IP address. This is addressed in the article.
[ Parent | on HN ]
Re:Accidentally Stopping a Global Cyber Attack by 13of40 on Saturday May 13, 2017 @04:45PM (#14332913)
How many ISPs spoof failed DNS queries so they can feed you ads? That alone would make this useless as an evasion technique.
[ Parent | on HN ]
Re:Accidentally Stopping a Global Cyber Attack by lmm on Sunday May 14, 2017 @03:46AM (#14334701)
It means the malware would not execute for users on those ISPs because they false-positive for being a sandbox; that doesn't make it useless unless every ISP is doing that.
[ Parent | on HN ]
Re:Accidentally Stopping a Global Cyber Attack by yaur on Sunday May 14, 2017 @11:49PM (#14339024)
OTOH it means that laptops won't activate until they are on a work network, for an SMB worm that's probably not a bad strategy.
[ Parent | on HN ]
Re:Accidentally Stopping a Global Cyber Attack by kalleboo on Monday May 15, 2017 @08:29AM (#14341017)
Clearly not that many considering how well it did manage to spread.
[ Parent | on HN ]