my tweets are severely limited by my lack of understanding of what I am doing.
I think the most interesting element to Petya isn't Petya or the wiping of systems - it's that ME Doc was a remote implant on ~400k PCs...
...across multinationals, law firms, the world's 3rd biggest company etc and NOBODY NOTICED.
-
-
People notice and care when something happens on THEIR screen. That's why ransomware is changing infosec (probably for better).
-
Is it though? The same infection vectors of 10-15 years ago still work today.
- Pokaż odpowiedzi
Nowa rozmowa -
-
-
Well maybe someone did right? (Although I think your point still stands)https://twitter.com/0xAmit/status/883073931976081408 …
Here's a RAR file full of trojanized#MeDoc versions. It was submitted to VT from the Ukraine a month ago.
pic.twitter.com/0eDEtOsKYGDziękujemy. Twitter skorzysta z tych informacji, aby Twoja oś czasu bardziej Ci odpowiadała. CofnijCofnij
-
-
-
Note that the MEDoc backoor wasn't as widespread as the worm. The Ukrainian offices had it - not all Maersk offices worldwide, for instance.
-
how do you know that?
- Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.