4 ms·
A quick whois lookup suggests the domain name was registered on April 26. This is after we knew about EternalBlue and DoublePulsar, but suspiciously before the
by cvoss 9y ago
A quick whois lookup suggests the domain name was registered on April 26. This is after we knew about EternalBlue and DoublePulsar, but suspiciously before the May 12th onslaught of WannaCry at the NHS. Also, the domain status is "serverTransferProhibited" (https://icann.org/epp#serverTransferProhibited https://icann.org/epp#serverTransferProhibited). Very interesting.
- libeclipse 9y agoThat is very interesting. I don't see anyone having a significant motive here. Only thing I can think of is really, really far-fetched. Someone who know what was about to happen to the NHS inserted a backdoor into this distro, and is now advertising it to them. Yeah, I know. Probably not.
- prawl 9y agoCan you spell out what you are implying? Are you saying that the NHSbuntu project is somehow involved with WannaCry, or that they are somehow profiteering?
- fractalwrench 9y agoI believe some registrars default to that value after you buy a domain, presumably to make it harder to transfer it elsewhere. I've run into this with an old domain name with Namecheap, not sure how widespread the practice is.