Format Web Page
Location PART 1 - TONS OF PUNKS, ONE BIG JERK CHAPTER 2: NO MOAT IN BLOAT Bug Hunt or Witch Hunt?

"WannaCry variants encrypted files only when they could not successfully contact their configured internet-check domain."

Mandiant documented WannaCry variants whose encryption logic depended on whether an HTTP request to a hard-coded domain succeeded.

View Source
Source title WannaCry Ransomware Campaign: Threat Details and Risk Management
Source authors John Miller, David Mainor
Source year 2017
Confidence high
Importance high
Back to evidence PREVIOUSNEXT