• Hacking News
    • Leaks
    • WikiLeaks
    • Anonymous
  • Tech
    • Android
    • Apple News
    • BlackBerry
    • Google News
    • Microsoft
    • Motorola
    • Nokia
    • Samsung
    • 3D
  • Cyber Crime
    • Phishing Scam
  • How To
  • Cyber Events
    • Censorship
    • Cyber Attacks
  • Security
    • Malware
  • Surveillance
    • Drones
    • NSA
    • Privacy
  • Explore
    • Gaming
    • Science
    • Viral
HackRead
  • January 28th, 2021
  • Home
  • Advertise
  • Privacy Policy
  • Contact Us
HackRead
  • Hacking News
    • Leaks
    • WikiLeaks
    • Anonymous
  • Tech
    • Android
    • Apple News
    • BlackBerry
    • Google News
    • Microsoft
    • Motorola
    • Nokia
    • Samsung
    • 3D
  • Cyber Crime
    • Phishing Scam
  • How To
  • Cyber Events
    • Censorship
    • Cyber Attacks
  • Security
    • Malware
  • Surveillance
    • Drones
    • NSA
    • Privacy
  • Explore
    • Gaming
    • Science
    • Viral
  • Follow us
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
Home
Security
Malware

386 WannaCry Ransomware and 26 EternalRocks Samples Discovered

May 24th, 2017 Waqas Security, Cyber Crime, Malware 0 comments
386 WannaCry Ransomware and 26 EternalRocks Samples Discovered
Share on FacebookShare on Twitter

Have you heard the expression “it ain’t over till it’s over”? Well, it matches with the ongoing situation of WannaCry ransomware attacks as researchers from TrustLook, a cyber security company have collected 386 new samples of WannaCry ransomware.

WannaCry is a wicked encryption based malware (aka ransomware) which used Server Message Block protocol (SMB) vulnerability in the Windows operating system. The malware uses EternalBlue exploit stolen from the National Security Agency (NSA) of the United States and leaked by the Shadow Brokers hacking group. Once infecting the device the malware asks users to pay a ransom payment of $300 to $600 in bitcoins.

While security researchers (the good guys) are halting WannaCry infection by identifying its kill switch, the cyber criminals (the bad guys) are coming up with new samples or trying to DDoS the existing kill switches to carry on with the infection.

“This attack is unprecedented in scale,” said Allan Zhang, co-founder, and CEO of Trustlook. “Windows users and administrators should ensure that their systems are updated with the latest security patches to help prevent further infections and to slow the spread of the ransomware.”

TrustLook has also released a free scanner and vaccine toolkit to protect Windows computers that are vulnerable to the malware. TrustLook’s toolkit can be downloaded from GitHub. Additionally, the company has published hash for each sample which can be seen here.

In their second blog post, the company has also discussed the discovery of 26 EternalRocks samples. EternalRocks is a worm which was found last week by security researchers. This worm uses the same SMB vulnerability in Windows like the WannaCry but is much more advanced and sophisticated than WannaCry could ever be since it utilizes seven NSA hacking tools while WannaCry used just two. These tools are EternalBlue, DoublePulsar, EternalChampion, EternalRomance, EternalSynergy, ArchiTouch and SMBTouch.

TrustLook has also published hash for each sample. 

Other than knowing that EternalRocks can do more damage than WannaCry the detailed analysis of it is still pending. TrustLook says they are working on in-depth analysis and more details will be shared very soon.

To make sure your system is safe from ransomware attacks; make sure to follow the below mentioned steps:

Do not open an unknown email
Do not download files from an unknown email
Do not click files from an unknown email
Avoid visiting malicious sites
Do not download software and apps from a third-party store/website
Show hidden file extensions
Keep your system updated
Make sure you are using a reputable security suite
Back up your data
Use System Restore to get back to a known-clean state

  • Tags
  • Cyber Crime
  • hacking
  • internet
  • Malware
  • NSA
  • Ransomware
  • security
  • WannaCry
Facebook Twitter LinkedIn Pinterest
Previous article Indian hacker pwned Air India, SpiceJet & Cleartrip; booked free flights
Next article Hackers have found a way to hijack your system through subtitles
Waqas

Waqas

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Related Posts
NetWalker ransomware disrupted - Cryptocurrency and domain seized

NetWalker ransomware disrupted - Cryptocurrency and domain seized

World's Most 'Resilient Malware' Botnet Emotet Taken Down

World's Most 'Resilient Malware' Botnet Emotet Taken Down

Top Cybersecurity Threats to Watch in 2021

Top Cybersecurity Threats to Watch in 2021

Newsletter

Get the best stories straight into your inbox!



Don’t worry, we don’t spam

Latest Posts
NetWalker ransomware disrupted - Cryptocurrency and domain seized
Cyber Crime

NetWalker ransomware disrupted - Cryptocurrency and domain seized

36
Transferring Whatsapp data from iPhone to Android with MobileTrans
How To

Transferring Whatsapp data from iPhone to Android with MobileTrans

25
World's Most 'Resilient Malware' Botnet Emotet Taken Down
Cyber Crime

World's Most 'Resilient Malware' Botnet Emotet Taken Down

69

HACKREAD is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance and Hacking News with full-scale reviews on Social Media Platforms & Technology trends. Founded in 2011, HackRead is based in the United Kingdom.

Follow us