3 ms·
MalwareTech found the kill switch for WannaCrypt too. https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ra
by arthurfm 9y ago
MalwareTech found the kill switch for WannaCrypt too.
https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ransomware-cyber-attack https://www.theguardian.com/technology/2017/may/13/accidenta...
https://twitter.com/MalwareTechBlog/status/863187104716685312 https://twitter.com/MalwareTechBlog/status/86318710471668531...
https://twitter.com/MalwareTechBlog/status/863189077843116032 https://twitter.com/MalwareTechBlog/status/86318907784311603...
- whatnotests 9y agoThis sounds like something straight out of a James Bond movie.
- mirimir 9y agoThat was a dumb move by the malware coder ;) Wouldn't you want to hide a kill switch?
- tempay 9y agoThe MalwareTech write up gives a plausible reason for the developer having accidentally added the kill switch: > I believe they were trying to query an intentionally unregistered domain which would appear registered in certain sandbox environments, then once they see the domain responding, they know they’re in a sandbox the malware exits to prevent further analysis.
- pradeepchhetri 9y agoMalwareTech wrote a blog about it: https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html https://www.malwaretech.com/2017/05/how-to-accidentally-stop...