New
#1
WannaCrypt Ransomeware
WannaCrypt Ransomeware in action...live video.
WannaCry Ransomware in Action | NSA Exploit based - YouTube
WannaCrypt Ransomeware in action...live video.
WannaCry Ransomware in Action | NSA Exploit based - YouTube
The video shows the supposedly safe Windows 10 being hijacked by Wanacrypt in a vm.
How's that work then?
It's clearly an older version of Windows 10. If you look in the bottom right taskbar, you see the notification icon to the left of the clock, this change was made a very long time ago (don't remember exactly when.. pre-AU? That's probably an original release Windows 10.
The exploit was only patched a few months ago.
Interesting - in that video, it shows the UAC popping up for the command to delete all shadow copies. Usually infections will run this silently. But, it's something to note: if someone does get infected, and they're paying attention to the UAC and don't allow it, they will be able to recover using shadow copies.
Also note that the encryption has already been done by the time the AV throws a warning.