Wanacry or Wanasmile?

In this article, you will find best practices regarding security and the high availability of your data to prevent the spread of Wanacry and other ransomware. What is wanacry? Wanacry is a ransomware that uses a hole in the SMB protocol called EternalBlue, then DoublePulsar is installed as a backdoor to run Wanacry. After you get infected, your files begin to be encrypted with the AES-128-CBC cipher, and then a popup asks you for a ransom to get them back. It spreads through the network using port TCP/445 (SMB v1). ...

May 29, 2017 · 5 min · 917 words · zoph