Another Ransomware Outbreak Is Going Global

Re:Another Ransomware Outbreak Is Going Global by morley on Tuesday June 27, 2017 @11:58AM (#14646585)

Maybe I'm missing something, but is there any evidence that this is actually a 0day attack? I didn't study the last outbreak that closely, but it seemed like it was a vulnerability that had been patched, but affected computers that weren't patched. Maybe I'm wrong though. But 0days or no, there will always exist some number of computers that have not been properly kept up-to-date and thus will be vulnerable to security exploits even after they've been disclosed and patched.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by jannes on Tuesday June 27, 2017 @12:02PM (#14646625)

No, it's probably not a 0-day this time. But this exploit used to be a NSA 0-day before it became public. Everything that's happening now is the "lite" version of what the NSA is capable of.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by idlewords on Tuesday June 27, 2017 @01:10PM (#14647194)

Yeah, and the Department of Defense is capable of nuking major cities. And it's about as relevant to this discussion.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by tarsinge on Tuesday June 27, 2017 @01:27PM (#14647355)

It's relevant because it's like the nukes were stolen and that it will continue to happen

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by SimbaOnSteroids on Tuesday June 27, 2017 @01:43PM (#14647518)

I'd argue its relevant because you can't CTRL+C CTRL+V a nuke.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by dsfyu404ed on Tuesday June 27, 2017 @02:45PM (#14648083)

But would you download a car?

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by SimbaOnSteroids on Tuesday June 27, 2017 @04:45PM (#14649249)

Yes.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by BearGoesChirp on Tuesday June 27, 2017 @02:34PM (#14647977)

Let me know when the DoD routinely has their nukes stolen, possibly without them ever knowing.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by aaronharder on Tuesday June 27, 2017 @01:24PM (#14647323)

Everyone would notice a nuclear attack. NSA exploiting vulnerabilities to their own ends, not so much.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by willstrafach on Tuesday June 27, 2017 @01:29PM (#14647375)

This is absolutely detectable, and IDS signatures already exist for EternalBlue (Let alone the fact that it was patched by Microsoft in March).

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by djsumdog on Tuesday June 27, 2017 @12:09PM (#14646678)

The previous one WanaCry, was based on a vulnerability that was patched on later OSes. Microsoft went back and retroactively added patches for unmaintained operating systems (like XP).

It was based off an SMB exploit released in a ShadowBroker's dump; an unreleased exploit thought to have been used by the NSA.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by willstrafach on Tuesday June 27, 2017 @01:30PM (#14647387)

> But 0days or no, there will always exist some number of computers that have not been properly kept up-to-date and thus will be vulnerable to security exploits even after they've been disclosed and patched.

You are correct about this. Patches were released in March, but many seem to have put off security-critical patching.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by SyneRyder on Tuesday June 27, 2017 @02:11PM (#14647754)

> Patches were released in March, but many seem to have put off security-critical patching.

In fairness to some of the unpatched - the last round of Windows 10 updates refused to install on some machines (well, mine and some others on Twitter), and trapped me in an endless loop of download-install-fail-download. When this happened my landline internet was down, so this was happening over 4G tethering, and burning up $20/day in cellphone data until I just turned off my internet/tethering.

I'm not saying don't patch (you should!), just that even people trying to stay patched and do the right thing can find they're unable to do so.

[ Parent | on HN ]

Re:Another Ransomware Outbreak Is Going Global by willstrafach on Tuesday June 27, 2017 @02:16PM (#14647805)

You are absolutely correct, people are even still wary after the aggressive Windows 10 update tricks, so it is extremely unfortunate yet does make some sense.

I hope Microsoft can find a way to earn trust back, this problem is going to get much worse if people do not install security patches ASAP when released.

[ Parent | on HN ]