WannaCry/WanaCrypt0r 2.0 is indeed triggering ET rule : 2024218 "ET EXPLOIT Possible ETERNALBLUE MS17-010 Echo Response"pic.twitter.com/ynahjWxTIA
-
-
-
what can we do about this ransomware, any specific tools or specific windows update ??
- Visa svar
Ny konversation -
-
-
Is that its primary exploit? Or is it using multiple?
-
The CERT Spain advisory was alerted to include ETERNALBLUE and DOUBLEPULSAR
- Visa svar
Ny konversation -
-
-
Can you share the PCAP please?
Tack. Twitter använder detta för att förbättra din tidslinje. ÅngraÅngra
-
-
-
Yep. A very dangerous and effective one that microsoft released patches for 2 months ago.
-
Denna Tweet är otillgänglig.
- Visa svar
Ny konversation -
-
-
something dosent add up MS17-010 was fixed by microsoft march 14 , but Equation gruop ETERNALBLUE was released a month after that.
-
So, there is a patch for 2 months?
- Visa svar
Ny konversation -
-
-
Can you share the pcap with SMB traffic please?
Tack. Twitter använder detta för att förbättra din tidslinje. ÅngraÅngra
-
Hämtningen verkar ta ett tag
Twitter kan vara överbelastat eller ha tillfälliga problem. Försök igen eller besök Twitter Status om du vill ha mer information.