Accidentally Stopping a Global Cyber Attack

Re:Accidentally Stopping a Global Cyber Attack by meowface on Saturday May 13, 2017 @03:23PM (#14332538)

I still can't understand how the malware authors could be so smart (or, if not smart, at least competent enough to build ransomware from scratch, make it wormable with ETERNALBLUE, and launch a massive and effective spam campaign) and yet so stupid.

They could've achieved the same sandbox detection effect by just registering the domain and pointing it at 1.1.1.1 or whatever. The non-sandboxed connections would still fail, and no one else could take the domain.

[ Parent | on HN ]

Re:Accidentally Stopping a Global Cyber Attack by BoorishBears on Saturday May 13, 2017 @06:12PM (#14333274)

I don't think the creator would be too keen to create anything unnecessary that could be linked back to them through a paper trail.

[ Parent | on HN ]

Re:Accidentally Stopping a Global Cyber Attack by Avalyst on Sunday May 14, 2017 @06:57AM (#14335091)

I find it interesting that they didn't randomize a couple of long strings and tried to resolve those instead like the article mentioned has been done in the past

[ Parent | on HN ]

Re:Accidentally Stopping a Global Cyber Attack by iainmerrick on Monday May 15, 2017 @11:29AM (#14342320)

They could've achieved the same sandbox detection effect by just registering the domain

That would leave a paper trail, potentially revealing who's behind the malware.

[ Parent | on HN ]