To Customer Support To Customer Support

New SMB Worm Uses Seven NSA Hacking Tools. WannaCry Used Just Two

  • 20 May 2017
  • 3 replies
  • 618 views
Jasper_The_Rasper
Rank
Userlevel 7
Badge +54
May 19th 2017 By Catalin Cimpanu
 
Researchers have detected a new worm that is spreading via SMB, but unlike the worm component of the WannaCry ransomware, this one is using seven NSA tools instead of two.
 
The worm's existence first came to light on Wednesday, after it infected the SMB honeypot of Miroslav Stampar, member of the Croatian Government CERT, and creator of the sqlmap tool used for detecting and exploiting SQL injection flaws.
 

EternalRocks is more complex but less dangerous

 
As a worm, EternalRocks is far less dangerous than WannaCry's worm component, as it currently does not deliver any malicious content. This, however, does not mean that EternalRocks is less complex. According to Stampar, it's actually the opposite.
 
Full Article

3 replies

Baldrick
Rank
Userlevel 7
And so the damage caused by those **bleep** dogooders continues...and I am sure that the miscreant must think that they have hit the jackpot whne the very people they are trying to harm/fleece turn out to stupidly be assisting them. :@
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2
Jasper_The_Rasper
Rank
Userlevel 7
Badge +54
May 25th 2017  By Catalin Cimpanu
 
                                           


 
The developer of the EternalRocks SMB worm appears to have shut down his operation, following the intense media coverage his malware has received in the past seven days.
 
For people unaware of what EternalRocks is, this is a computer worm that uses the SMB protocol and NSA hacking tools to spread to Windows computers running vulnerable SMB services.
 
The EternalRocks SMB worm came to light last week, discovered by Croatian security researcher Miroslav Stampar. The worm took inspiration from the SMB worm component used by the WannaCry ransomware, but it used seven NSA hacking tools, instead of two.
 
Unlike the WannaCry SMB worm, which delivered the WannaCry ransomware binary, this SMB worm never deployed any malware on infected hosts (based on currently available information).
 
Full Article
Baldrick
Rank
Userlevel 7
A miscreant with a conscience? Well, that is a novelty, and perhaps augers well for the future?
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2

Reply


Terms & Conditions

© 2004 - Webroot Inc.

We have recently updated our Privacy Policies. We encourage you to read the full terms here.