Are they that stupid to make the same mistake twice?
New kill switch detected ! …http://www.ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com #WannaCry - Just pushed for an order !pic.twitter.com/cV6i8DpaF4
-
-
-
Also, given that anyone can hex edit the kill switch, can we be sure that the same authors are responsible for variants?
Slut på konversationen
Ny konversation -
-
-
I highly suspect there are multiple variants in the wild with multiple kill switches!
#WannaCry Good news is: there are still kill switches! - Slut på konversationen
Ny konversation -
-
-
Tack. Twitter använder detta för att förbättra din tidslinje. ÅngraÅngra
-
-
-
and why the heck the coder didn’t register the kill switch domain yet while building the new variant.?. ¯\_(ツ)_/¯ .
-
I've catch the first version of this variante. It was catch in the wild by a Honeypot. At the time of catching Killswitch was unregistered.
Slut på konversationen
Ny konversation -
-
-
Same file as 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c w/2 bytes in the ks domain changed. Smells like hexedit.
Tack. Twitter använder detta för att förbättra din tidslinje. ÅngraÅngra
-
-
-
I would just reverse the logic. 1st killswitch was: "can reach domain X" - 2nd switch: can't reach domain X" One
#Wannacry would always workTack. Twitter använder detta för att förbättra din tidslinje. ÅngraÅngra
-
-
-
I confirm this new variant #2 had been deployed after
@MalwareTechBlog registered the kill-switch variant #1#WannaCrypic.twitter.com/ShRqC6iIUH
-
Is there a new bitcoin wallet address?
- Visa svar
Ny konversation -
Hämtningen verkar ta ett tag
Twitter kan vara överbelastat eller ha tillfälliga problem. Försök igen eller besök Twitter Status om du vill ha mer information.