my tweets are severely limited by my lack of understanding of what I am doing.
I am on a train analysing Petya. I think this will be bigger than WannaCry. It's much better designed. Has automated lateral movement.
-
Expect a steady stream of big companies over next few days. That said antivirus should catch up soon will significantly help.
Remember when I highlighted tscon RDP session hijacking, and that it worked w/o RDP roll installed? I think it's doing that.
-
-
Doesn't WannaCry use it too?
-
It does but Wannacry uses hijacked sessions to present the decryptying instructions and not for later infections
Koniec rozmowy
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.