A massive cyberattack has broken out worldwide, with computer networks in Ukraine and Russia the hardest hit, and the rest of Europe and North America quickly following. This attack, like most recent attacks, is based on an NSA-developed exploit called EternalBlue.
The attack is in the form of ransomware which encrypts the computer’s hard drive, and then offers to unlock the computers for approximately $300 in bitcoins. The contact email for the ransomware has already been shut down by the email provider, however, meaning there is no way for people to actually pay the ransom.
The attack was first reported in sites around Kiev, and quickly spread. It was incorrectly identified as a new version of the Petya ransomware which had been around for some time, though Kaspersky Lab quickly corrected that, pointing out it was a new software never seen before, and naming it “NotPetya.”
The exploit rests on a flaw in Microsoft’s implementation of the SMB version 1.0 protocol, though Microsoft released a patch back in March for all current Windows operating systems. There are still clearly a lot of organizations that haven’t gotten around to installing it, however, as this is the latest in a string of major attacks using the NSA-developed exploit.
Last 5 posts by Jason Ditz
- ISIS Kills Over 60 Syrian Troops in 48 Hours of Attacks - April 20th, 2019
- US Intel Doubts North Korea Weapons Test Was Successful - April 19th, 2019
- Ecuador Judge Orders Detention of Former Foreign Minister Connected to Assange - April 19th, 2019
- US Reveals Support for Former CIA Asset Hafter in Libya - April 19th, 2019
- Pompeo Dismisses North Korea Demands, Says He Can't Be Removed From Talks - April 19th, 2019