Just two domain names stand between world and global ransomware chaos

Posted by DanielS on Monday, 15 May 2017 09:50.

QZ, “Just two domain names now stand between the world and global ransomware chaos”, 15 May 2017:

A second wave of global infections caused by hackers in a global ransomware attack has been halted. The hackers responsible for the cyber attack, unprecedented in its global scale, demanded ransom be sent to three bitcoin addresses. So far they have amassed the equivalent of over $42,000 in ransom. But a new “kill switch” by Matthieu Suiche, the founder of cybersecurity startup Comae Technologies, has prevented about 10,000 infected machines from propagating the ransomware since it was flipped roughly 24 hours ago.

The WannaCry ransomware was originally halted by the UK cybersecurity researcher who goes by the name MalwareTech. He “accidentally” stopped the rapidly spreading infection by registering domain (9iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com) that he found in WannaCry’s code, without knowing what its effect would be. The domain turned out to be a kill switch left in the code to stop the ransomware’s propagation.

The act of registering the domain name halted the malware’s spread.

       
       

After the initial WannaCry kill switch was found, researchers predicted that variants would soon appear that were harder to stop. Suiches analyzed two new variants that appeared yesterday, and found that one of them contained a similar kill switch mechanism, but using a different domain (ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com). He registered the new domain about 20 hours ago, and infection rates have plummeted.

The number of active, infected, machines overall is down to the hundreds now, from about 200,000 machines just two days ago, according to data collected by MalwareTech. In the chart below, “online” indicates whether a machine is still connected to the internet and capable of spreading the malware:

       
WannaCry infections on May 15, 2017 at 8:50am

The worst is not quite over. Yet more variants will appear, and large organizations must scramble to install a fix released by Microsoft to prevent further infections and propagation. Until those variants crop up, as Suiche observed, just two domain names stand between the world and total anarchy on the internet.

Read this next: Russians and Koreans are the biggest payers to the global ransomware hackers



Comments: None.



Post a comment:


Name: (required)

Email: (required but not displayed)

URL: (optional)

Note: You should copy your comment to the clipboard or paste it somewhere before submitting it, so that it will not be lost if the session times out.

Remember me


Next entry: Trump just gave China what it wanted for its new Silk Road: a credibility boost from the US
Previous entry: Iran presidential candidates lay blame for ‘failed’ nuclear deal on reformer Rouhani

image of the day

Existential Issues

DNA Nations

Establishment Problem

Categories

Links

Endorsement not implied.

Immigration

Islamist Threat

Anti-white Media Networks

Audio/Video

Crime

Economics

Education

General

Historical Re-Evaluation

Controlled Opposition

Nationalist Political Parties

Science

Europeans in Africa

Of Note

Comments

DanielS commented in entry 'The New Religion Exclusively for Those of Indigenous European Extraction' on Mon, 19 Feb 2018 08:29. (View)

mancinblack commented in entry 'The New Religion Exclusively for Those of Indigenous European Extraction' on Mon, 19 Feb 2018 08:16. (View)

Blue on Black commented in entry 'Trout Mask Replica' on Mon, 19 Feb 2018 08:12. (View)

2016 commercials commented in entry 'WHITE WOMEN FOR SALE!' on Mon, 19 Feb 2018 06:27. (View)

Like a bad neighbor, State Farm is there commented in entry 'WHITE WOMEN FOR SALE!' on Mon, 19 Feb 2018 05:40. (View)

2018 Olympic Hockey Tournament commented in entry 'Winter Olympics not diverse enough for US media' on Mon, 19 Feb 2018 03:38. (View)

Taken For Granted commented in entry 'WHITE WOMEN FOR SALE!' on Mon, 19 Feb 2018 02:42. (View)

Commercials: "resistance is futile" commented in entry 'WHITE WOMEN FOR SALE!' on Mon, 19 Feb 2018 01:10. (View)

The Mountain Between Us commented in entry 'WHITE WOMEN FOR SALE!' on Sun, 18 Feb 2018 23:27. (View)

Kristy Boden commented in entry 'Two more London attacks' on Sun, 18 Feb 2018 15:54. (View)

JF interviews Todd Lewis commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Sun, 18 Feb 2018 11:26. (View)

The Rooster commented in entry 'Trout Mask Replica' on Sun, 18 Feb 2018 11:06. (View)

Uncomfortable Bear commented in entry '4 things we learned from the indictment of 13 Russians in the Mueller investigation' on Sun, 18 Feb 2018 09:23. (View)

Nikolas Cruz commented in entry '"What We Don't Know - Motive." Likely: revenge against societal incoherence, lack of accountability' on Sun, 18 Feb 2018 02:09. (View)

Maccabees commented in entry 'The alternative right's big tent, already too inclusive - includes Jews as well' on Sun, 18 Feb 2018 00:57. (View)

Max Musson article mapped commented in entry 'Dark Side of Self Actualization & Incommensurate GenderAgendas' on Sun, 18 Feb 2018 00:14. (View)

8,606 fake refugees so far in 2018 commented in entry 'More Than A Thousand Illegal Immigrants Reach Europe In First Week Of 2018' on Sat, 17 Feb 2018 18:52. (View)

Orson commented in entry 'Serial killer white-out' on Sat, 17 Feb 2018 15:58. (View)

Toba commented in entry 'Euro-DNA Nation' on Sat, 17 Feb 2018 11:02. (View)

Allman, Wetton, Coryell, Holdsworth commented in entry 'Trout Mask Replica' on Sat, 17 Feb 2018 10:14. (View)

Invisible men commented in entry 'Dark Side of Self Actualization & Incommensurate GenderAgendas' on Sat, 17 Feb 2018 08:28. (View)

Uncomfortable Bear commented in entry '4 things we learned from the indictment of 13 Russians in the Mueller investigation' on Sat, 17 Feb 2018 07:23. (View)

Twins, one black, one White commented in entry 'Euro-DNA Nation' on Sat, 17 Feb 2018 02:02. (View)

Distributist vs JF commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Sat, 17 Feb 2018 00:22. (View)

Reactionary Expat commented in entry 'The New Religion Exclusively for Those of Indigenous European Extraction' on Fri, 16 Feb 2018 18:54. (View)

On the Obama portrait artist commented in entry 'Obama portrait artist's past work depicted black women decapitating white women' on Fri, 16 Feb 2018 17:39. (View)

KM on proprietory modules of mentation commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Fri, 16 Feb 2018 07:32. (View)

Andrew Torba at RI commented in entry 'FCC doubles down on dead-wrong definition of how internet works' on Fri, 16 Feb 2018 01:26. (View)

DanielS commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 18:15. (View)

DanielS commented in entry 'Next-level TRS: Michael ‘Enoch’ Peinovich is actually Michael ‘Enoch’ ENOCKSON Peinovich-Sippel.' on Thu, 15 Feb 2018 18:04. (View)

Guessedworker commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 18:03. (View)

DanielS commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 17:15. (View)

DanielS commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 17:10. (View)

Captainchaos commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 16:17. (View)

Guessedworker commented in entry 'Corrected: After sorting confused language: check points of hermeneutic of racial stasis/homeostasis' on Thu, 15 Feb 2018 15:38. (View)

affection-tone