Just two domain names stand between world and global ransomware chaos

Posted by DanielS on Monday, 15 May 2017 09:50.

QZ, “Just two domain names now stand between the world and global ransomware chaos”, 15 May 2017:

A second wave of global infections caused by hackers in a global ransomware attack has been halted. The hackers responsible for the cyber attack, unprecedented in its global scale, demanded ransom be sent to three bitcoin addresses. So far they have amassed the equivalent of over $42,000 in ransom. But a new “kill switch” by Matthieu Suiche, the founder of cybersecurity startup Comae Technologies, has prevented about 10,000 infected machines from propagating the ransomware since it was flipped roughly 24 hours ago.

The WannaCry ransomware was originally halted by the UK cybersecurity researcher who goes by the name MalwareTech. He “accidentally” stopped the rapidly spreading infection by registering domain (9iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com) that he found in WannaCry’s code, without knowing what its effect would be. The domain turned out to be a kill switch left in the code to stop the ransomware’s propagation.

The act of registering the domain name halted the malware’s spread.

       
       

After the initial WannaCry kill switch was found, researchers predicted that variants would soon appear that were harder to stop. Suiches analyzed two new variants that appeared yesterday, and found that one of them contained a similar kill switch mechanism, but using a different domain (ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com). He registered the new domain about 20 hours ago, and infection rates have plummeted.

The number of active, infected, machines overall is down to the hundreds now, from about 200,000 machines just two days ago, according to data collected by MalwareTech. In the chart below, “online” indicates whether a machine is still connected to the internet and capable of spreading the malware:

       
WannaCry infections on May 15, 2017 at 8:50am

The worst is not quite over. Yet more variants will appear, and large organizations must scramble to install a fix released by Microsoft to prevent further infections and propagation. Until those variants crop up, as Suiche observed, just two domain names stand between the world and total anarchy on the internet.

Read this next: Russians and Koreans are the biggest payers to the global ransomware hackers



Comments: None.



Post a comment:


Name: (required)

Email: (required but not displayed)

URL: (optional)

Note: You should copy your comment to the clipboard or paste it somewhere before submitting it, so that it will not be lost if the session times out.

Remember me


Next entry: Trump just gave China what it wanted for its new Silk Road: a credibility boost from the US
Previous entry: Iran presidential candidates lay blame for ‘failed’ nuclear deal on reformer Rouhani

image of the day

Existential Issues

DNA Nations

Establishment Problem

Categories

Links

Endorsement not implied.

Immigration

Islamist Threat

Anti-white Media Networks

Audio/Video

Crime

Economics

Education

General

Historical Re-Evaluation

Controlled Opposition

Nationalist Political Parties

Science

Europeans in Africa

Of Note

Comments

Guessedworker commented in entry 'Theresa May's statement in wake of a White man's attack on Finsbury Park Muslims' on Sun, 25 Jun 2017 18:40. (View)

Stunning US intel of Putin's direct involvement commented in entry 'There's no "there there" to Russian investigation only where the Alt-Right doesn't want there to be.' on Sat, 24 Jun 2017 22:50. (View)

T (formerly the Majorityrights.com blogger 'Alex') commented in entry 'Theresa May's statement in wake of a White man's attack on Finsbury Park Muslims' on Sat, 24 Jun 2017 16:10. (View)

T (formerly the Majorityrights.com blogger 'Alex') commented in entry 'Theresa May's statement in wake of a White man's attack on Finsbury Park Muslims' on Sat, 24 Jun 2017 15:53. (View)

Putin’s direct instructions to damage Hillary commented in entry 'There's no "there there" to Russian investigation only where the Alt-Right doesn't want there to be.' on Sat, 24 Jun 2017 13:22. (View)

DanielS commented in entry 'On Sibelius and Heidegger' on Sat, 24 Jun 2017 09:59. (View)

Guessedworker commented in entry 'On Sibelius and Heidegger' on Sat, 24 Jun 2017 09:38. (View)

DanielS commented in entry 'On Sibelius and Heidegger' on Sat, 24 Jun 2017 08:17. (View)

Guessedworker commented in entry 'On Sibelius and Heidegger' on Sat, 24 Jun 2017 04:20. (View)

Leeds Great Eddie Gray commented in entry 'Euro Cuck Final: a Disgraceful Epitome of The Cucked European Masculine Instinct for Nationalism' on Sat, 24 Jun 2017 02:38. (View)

al-Baghdadi's death almost "100% certain" commented in entry 'What happens when WNs accept Russian news reports uncritically?' on Fri, 23 Jun 2017 23:44. (View)

Greetings to France from Africa commented in entry 'black hyper-assertiveness' on Fri, 23 Jun 2017 10:27. (View)

Somali genius abetted the fire commented in entry 'LONDON'S BURNING: TOWERING INFERNO EXPECTED TO COLLAPSE' on Fri, 23 Jun 2017 05:00. (View)

"I can't answer that" commented in entry 'There's no "there there" to Russian investigation only where the Alt-Right doesn't want there to be.' on Fri, 23 Jun 2017 04:48. (View)

Summer Solstice commented in entry 'Nudity in Pamplona. Fancy dress at Stonehenge. Naked ambition in Manchester.' on Fri, 23 Jun 2017 02:19. (View)

Julia commented in entry 'Nudity in Pamplona. Fancy dress at Stonehenge. Naked ambition in Manchester.' on Fri, 23 Jun 2017 01:16. (View)

DanielS commented in entry 'On Sibelius and Heidegger' on Thu, 22 Jun 2017 17:47. (View)

Guessedworker commented in entry 'On Sibelius and Heidegger' on Thu, 22 Jun 2017 17:06. (View)

Watch your ghostly mouse betray you commented in entry 'There's no "there there" to Russian investigation only where the Alt-Right doesn't want there to be.' on Thu, 22 Jun 2017 14:48. (View)

DanielS commented in entry 'Test Your Capacity To See Through Jewish Crypsis: Which ones are Jewish?' on Thu, 22 Jun 2017 13:05. (View)

DanielS commented in entry 'On Sibelius and Heidegger' on Thu, 22 Jun 2017 11:46. (View)

Guessedworker commented in entry 'On Sibelius and Heidegger' on Thu, 22 Jun 2017 08:06. (View)

DanielS commented in entry 'On Sibelius and Heidegger' on Thu, 22 Jun 2017 06:24. (View)

Kylie Minogue commented in entry 'Trout Mask Replica' on Wed, 21 Jun 2017 12:41. (View)

DanielS commented in entry 'Social Rules: a deeply important philosophical matter beyond scientistic treatment of emergence' on Wed, 21 Jun 2017 06:44. (View)

What ends up a riddled, bobble-headed Sphinx? commented in entry 'black hyper-assertiveness' on Wed, 21 Jun 2017 05:07. (View)

DanielS commented in entry 'Social Rules: a deeply important philosophical matter beyond scientistic treatment of emergence' on Wed, 21 Jun 2017 03:30. (View)

animal crypsis commented in entry 'Test Your Capacity To See Through Jewish Crypsis: Which ones are Jewish?' on Wed, 21 Jun 2017 03:10. (View)

DanielS commented in entry 'Social Rules: a deeply important philosophical matter beyond scientistic treatment of emergence' on Wed, 21 Jun 2017 00:18. (View)

Out of kindness I suppose commented in entry 'Trout Mask Replica' on Tue, 20 Jun 2017 18:27. (View)

Damn, I wish I was your lover commented in entry 'Trout Mask Replica' on Tue, 20 Jun 2017 17:58. (View)

Al Ross commented in entry 'We can no longer allow liberals and brackets to co-opt issues of environment and species diversity' on Tue, 20 Jun 2017 07:23. (View)

DanielS commented in entry 'We can no longer allow liberals and brackets to co-opt issues of environment and species diversity' on Tue, 20 Jun 2017 06:48. (View)

The Conservative Party Died At Culloden commented in entry 'We can no longer allow liberals and brackets to co-opt issues of environment and species diversity' on Tue, 20 Jun 2017 05:37. (View)

Remember the Rhino commented in entry 'Survivor located of a branch not seen in 30 years among one of the most endangered species' on Tue, 20 Jun 2017 04:30. (View)

affection-tone