Wannacrypt0r (WannaCry) Ransomware Retrospect
Warning Do not play with the samples unless you really know what you’re doing. All Windows versions before Windows 10 are still vulnerable to the WannaCry (WannaCrypt, WannaCry, WanaCrypt0r, WCrypt or WCRY) ransomware if not patched for MS-17-010. The ransom is between $300 to $600, there is code to delete files in the virus, so it’s not just a threat. The worm loops through every RDP session on a system to run the ransomware as that user, also installs the DOUBLEPULSAR backdoor and it corrupts shadow volumes to make recovery harder.
Read more →