Ransomeware halted by security blogger
A cyber attack that affected the NHS UK(Read here) equally spread through all other organizations globally,and thanks to a security blogger,he was able to halt the spread of the 'ransomeware' from spreading and affecting more organizations.
The security blogger who is known online as Malware Tech,said he was going through the code that caused the malware on Friday night,when he made a brilliant discovery.
According to him,he said he discovered the software was trying to link an unusual web address but the address was not connected to any website because no one had registered it.
Whenever the malware tried to connect to this unusual website,it does not succeed and goes on causing more damage.
So,using his initiative,he decided to purchase the web address at $10.69 to enable him access analytical data and to find out the extent of damage of the 'ransomeware'.
Unknown to him,prior to the registration of the web address,the malware had stopped itself from spreading and it then dawned on him that he had made a significant breakthrough
According to Malware Tech:
According to Malware Tech,the 'ransomeware' is not yet defeated based on the fact that the registration of the web address stopped it from spreading,
The security blogger who is known online as Malware Tech,said he was going through the code that caused the malware on Friday night,when he made a brilliant discovery.
According to him,he said he discovered the software was trying to link an unusual web address but the address was not connected to any website because no one had registered it.
Whenever the malware tried to connect to this unusual website,it does not succeed and goes on causing more damage.
Unknown to him,prior to the registration of the web address,the malware had stopped itself from spreading and it then dawned on him that he had made a significant breakthrough
According to Malware Tech:
''The Malware exists to prevent further analysis.My registration caused all infections globally to believe they were inside a virtual machine and exist,thus we initially unintentionally prevented the spread and further ransoming of computers.''
According to Malware Tech,the 'ransomeware' is not yet defeated based on the fact that the registration of the web address stopped it from spreading,
''We have stopped this one,but there will be another one coming and it will not be stoppable by us.There is a lot of money in this,there is no reason for them to stop.It's not much effort for them to change the code and start over.''
Comments
Post a Comment