4 ms·
The ransomeware in this case spreads by exploiting a vulnerability that is now patched in Windows.
by mh8h 8y ago
The ransomeware in this case spreads by exploiting a vulnerability that is now patched in Windows.
- zenexer 8y agoAdditionally, if the machines were connected to the internet, the killswitch would've prevented it from spreading. WannaCry doesn't spread if a particular hostname resolves; this acts as a killswitch. Marcus Hutchins purchased the relevant domain name after reverse engineering WannaCry and noticing the killswitch. Edit: That's not to say the machines should be connected to the internet; I'm just explaining the circumstances that allowed this to occur.