WannaCry
 | It has been suggested that this article be merged into WannaCry ransomware attack. (Discuss) Proposed since May 2017. |
| WannaCry | |
|---|---|
 | |
| Type | Ransomware |
| Subtype | Cryptovirus |
| Classification | Computer worm |
| Isolation date | 12 May 2017 |
| Technical details | |
| Platform | Windows |
Wannacry (or WannaCrypt,[1] WanaCrypt0r 2.0,[2][3] Wanna Decryptor[4]) is a ransomware computer worm that targets the Microsoft Windows operating system. The virus was used to launch the WannaCry ransomware attack on Friday, 12 May 2017.
Operation
WannaCry uses the EternalBlue and DoublePulsar exploits to spread.[5] EternalBlue is based on a vulnerability in Microsoft's Server Message Block protocol, MS17-010.[6]
References
- ^ MSRC Team. "Customer Guidance for WannaCrypt attacks". Microsoft. Retrieved 13 May 2017.
- ^ Jakub Kroustek (12 May 2017). "Avast reports on WanaCrypt0r 2.0 ransomware that infected NHS and Telefonica". Avast Security News. Avast Software, Inc.
- ^ Fox-Brewster, Thomas. "An NSA Cyber Weapon Might Be Behind A Massive Global Ransomware Outbreak". Forbes. Retrieved 12 May 2017.
- ^ Woollaston, Victoria. "Wanna Decryptor: what is the 'atom bomb of ransomware' behind the NHS attack?". WIRED UK. Retrieved 13 May 2017.
- ^ "NHS cyber attack: Everything you need to know about 'biggest ransomware' offensive in history". The Daily Telegraph. Retrieved 13 May 2017.
- ^ "WannaCry Ransomware Attack Hits Victims With Microsoft SMB Exploit". eWeek. Retrieved 13 May 2017.
 | This malware-related article is a stub. You can help Wikipedia by expanding it. |
 | This Microsoft Windows article is a stub. You can help Wikipedia by expanding it. |