Just two domain names stand between world and global ransomware chaos

Posted by DanielS on Monday, 15 May 2017 09:50.

QZ, “Just two domain names now stand between the world and global ransomware chaos”, 15 May 2017:

A second wave of global infections caused by hackers in a global ransomware attack has been halted. The hackers responsible for the cyber attack, unprecedented in its global scale, demanded ransom be sent to three bitcoin addresses. So far they have amassed the equivalent of over $42,000 in ransom. But a new “kill switch” by Matthieu Suiche, the founder of cybersecurity startup Comae Technologies, has prevented about 10,000 infected machines from propagating the ransomware since it was flipped roughly 24 hours ago.

The WannaCry ransomware was originally halted by the UK cybersecurity researcher who goes by the name MalwareTech. He “accidentally” stopped the rapidly spreading infection by registering domain (9iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com) that he found in WannaCry’s code, without knowing what its effect would be. The domain turned out to be a kill switch left in the code to stop the ransomware’s propagation.

The act of registering the domain name halted the malware’s spread.

       
       

After the initial WannaCry kill switch was found, researchers predicted that variants would soon appear that were harder to stop. Suiches analyzed two new variants that appeared yesterday, and found that one of them contained a similar kill switch mechanism, but using a different domain (ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com). He registered the new domain about 20 hours ago, and infection rates have plummeted.

The number of active, infected, machines overall is down to the hundreds now, from about 200,000 machines just two days ago, according to data collected by MalwareTech. In the chart below, “online” indicates whether a machine is still connected to the internet and capable of spreading the malware:

       
WannaCry infections on May 15, 2017 at 8:50am

The worst is not quite over. Yet more variants will appear, and large organizations must scramble to install a fix released by Microsoft to prevent further infections and propagation. Until those variants crop up, as Suiche observed, just two domain names stand between the world and total anarchy on the internet.

Read this next: Russians and Koreans are the biggest payers to the global ransomware hackers



Comments: None.



Post a comment:


Name: (required)

Email: (required but not displayed)

URL: (optional)

Note: You should copy your comment to the clipboard or paste it somewhere before submitting it, so that it will not be lost if the session times out.

Remember me


Next entry: Trump just gave China what it wanted for its new Silk Road: a credibility boost from the US
Previous entry: Iran presidential candidates lay blame for ‘failed’ nuclear deal on reformer Rouhani

image of the day

Existential Issues

DNA Nations

Establishment Problem

Categories

Links

Endorsement not implied.

Immigration

Islamist Threat

Anti-white Media Networks

Audio/Video

Crime

Economics

Education

General

Historical Re-Evaluation

Controlled Opposition

Nationalist Political Parties

Science

Europeans in Africa

Of Note

Comments

Indian Strategy commented in entry 'The Indian/Chinese IQ puzzle continued for comments after 1000' on Tue, 12 Dec 2017 21:31. (View)

The standard accusations don't work there commented in entry '‘White Europe’: 60,000 nationalists march on Poland, call for a ‘White Europe of brotherly nations"' on Tue, 12 Dec 2017 14:40. (View)

Michael Gove commented in entry 'Post Brexit-vote roundtable: Leadership contest and the Turkish factor, Part 2.' on Tue, 12 Dec 2017 11:26. (View)

Guessedworker commented in entry 'A crisis in the custody suite – part 1' on Tue, 12 Dec 2017 05:53. (View)

Captainchaos commented in entry 'A crisis in the custody suite – part 1' on Mon, 11 Dec 2017 22:20. (View)

Morrakiu, dubious character behind Merchant Minute commented in entry 'These Are White Nationalists? What Is Behind TRS And The Alt-Right's Gushing Effusion For Trump?' on Mon, 11 Dec 2017 22:10. (View)

a clue of Islam’s Jewish origins commented in entry 'Jews Created Islam: Ideological capture as a response to constraints of Jewish ethnic exclusivism' on Mon, 11 Dec 2017 15:59. (View)

Katie Hopkins panders to Israel commented in entry ''Western man, stand up for your wives, daughters', Kate Hopkins tweet investigated as inciting hate' on Mon, 11 Dec 2017 15:28. (View)

mancinblack commented in entry 'Hungary and Slovakia Must Admit Refugees as Part of EU Relocation Program, EU Court Rules' on Mon, 11 Dec 2017 13:52. (View)

mancinblack commented in entry '"Miss Grand Myanmar", Shwe Eain Si, stripped of her title for telling truth about crisis in Rakhine' on Mon, 11 Dec 2017 12:31. (View)

mancinblack commented in entry 'Cernovich daggers and shields for the Alt-Right' on Mon, 11 Dec 2017 08:34. (View)

pennine commented in entry 'Kevin Crehan, 35, jailed for leaving bacon in front of mosque then executed by Muslims in his cell' on Mon, 11 Dec 2017 07:34. (View)

Rutgers prof in trouble for posts on Faceberg commented in entry 'Merkel and Zuckerberg are teaming up to attack you on Facebook' on Mon, 11 Dec 2017 00:00. (View)

On the Rise of Mixed-Race Britain commented in entry 'Harry engages old colored woman, threatens to adulterate Royal line's representation of 41,000 years' on Sun, 10 Dec 2017 09:00. (View)

Shamychel commented in entry '“Do you like white women? Because we have a lot of them at Baylor, and they love football players."' on Sun, 10 Dec 2017 06:11. (View)

Ukwuachu commented in entry '“Do you like white women? Because we have a lot of them at Baylor, and they love football players."' on Sun, 10 Dec 2017 05:59. (View)

Shawn commented in entry '“Do you like white women? Because we have a lot of them at Baylor, and they love football players."' on Sun, 10 Dec 2017 05:38. (View)

Chafin commented in entry '“Do you like white women? Because we have a lot of them at Baylor, and they love football players."' on Sun, 10 Dec 2017 05:05. (View)

The Nation: The Alt-Right Looks Left commented in entry 'White Left Imperative to defense, systemic health of European peoples' on Sat, 09 Dec 2017 14:35. (View)

DanielS commented in entry 'Jez on great form' on Sat, 09 Dec 2017 04:34. (View)

National-Satanist commented in entry 'Jez on great form' on Sat, 09 Dec 2017 04:23. (View)

DanielS commented in entry 'Netanyahu Concerned Race-mixing to Destroy Liberal Jews and American support' on Sat, 09 Dec 2017 01:42. (View)

Merkel seeks 390,000 Family Reunification Visas commented in entry 'EP President Schulz: Germany exists only in order to ensure the existence of the Jewish people.' on Fri, 08 Dec 2017 04:23. (View)

Flynn, "we're going to rip-up those sanctions and" commented in entry 'Evidence of Trump-Russia Collusion Already Exists, Watergate Prosecutors Say' on Thu, 07 Dec 2017 18:44. (View)

(((Lauren Southern))) commented in entry 'Hardly The Battle of Cable Street: What Berkeley Doesn't Mean' on Thu, 07 Dec 2017 18:28. (View)

mancinblack commented in entry 'EP President Schulz: Germany exists only in order to ensure the existence of the Jewish people.' on Thu, 07 Dec 2017 12:20. (View)

mancinblack commented in entry 'EP President Schulz: Germany exists only in order to ensure the existence of the Jewish people.' on Thu, 07 Dec 2017 11:34. (View)

Schulz calls for United States of Europe commented in entry 'EP President Schulz: Germany exists only in order to ensure the existence of the Jewish people.' on Thu, 07 Dec 2017 09:24. (View)

Russia likely Israeli match-maker commented in entry '"Israeli Defense Minister: 'I Prefer ISIS to Iran on Our Borders"' on Wed, 06 Dec 2017 03:10. (View)

Russia cheated at Sochi, banned at S Korea commented in entry 'N.Korean threat/capacity, shows both determinism & social construction by contrast to southern twin' on Wed, 06 Dec 2017 02:52. (View)

Lyon Christmas market cancelled by cost of terror commented in entry 'Berlin terror attack: 12 dead, 49 injured as truck ploughs into crowd at Christmas market' on Wed, 06 Dec 2017 01:22. (View)

Islamic plot to kill PM Theresa May foiled commented in entry 'Weston disbands Liberty GB in favor of backing Anne Marie Waters For Britain' on Wed, 06 Dec 2017 01:08. (View)

Cernovich daggers & shields for the alt-right commented in entry 'Cernovich seeds FireMcMaster hashtag propagated by 600 most active Russian Twitter operative handles' on Tue, 05 Dec 2017 20:22. (View)

Iceland's green feminist PM commented in entry 'Occupy Hambach forest, another step toward pervasive ecology' on Tue, 05 Dec 2017 15:17. (View)

Trump plans to move US Embassy to Jerusalem commented in entry '"Israeli Defense Minister: 'I Prefer ISIS to Iran on Our Borders"' on Tue, 05 Dec 2017 14:08. (View)

affection-tone