Exploring the crypt: Analysis of the WannaCrypt ransomware SMB exploit propagationOn May 12, there was a major outbreak of WannaCrypt ransomware. WannaCrypt directly borrowed exploit code from the ETERNALBLUE exploit and the DoublePulsar backdoor module leaked in April by a group calling itself Shadow Brokers. Using ETERNALBLUE, WannaCrypt propagated as a worm on older platforms, particularly Windows 7 and Windows Server 2008 systems that haven’t...
Source:
Exploring the crypt: Analysis of the WannaCrypt ransomware SMB exploit propagation
