News for hackers. Stuff that matters.

A comment on WannaCrypt ransomware has resumed spreading.

Re:WannaCrypt ransomware has resumed spreading by skamoen on Sunday May 14, 2017 @09:31AM (#14335537)
There seems to be a lot of confusion about versions without killswitches. This guy says he made a mistake: https://twitter.com/craiu/status/863718940870139904
[ Parent | on HN ]
Re:WannaCrypt ransomware has resumed spreading by viraptor on Sunday May 14, 2017 @09:57AM (#14335632)
Interesting for context:

https://twitter.com/marksteward/status/863747839117201409

New domains are just trivial modifications of the old one. Still hardcoded. That's unlikely to be a new version, but rather people playing around.

[ Parent | on HN ]
Re:WannaCrypt ransomware has resumed spreading by skamoen on Sunday May 14, 2017 @09:45AM (#14335584)
To be more specific, all samples without killswitch were samples of just the ransomware, not the worm spreading it.
[ Parent | on HN ]