Worldwide ransomware worm attack general - part 4 >what i

>yfw the Rothschild banks get infected

>>60355642
Rothschilds don't have bitcoin banks though

what would happen if comcast got this? would everyone using their internet service be vulnerable too? that would be crazy

SO IF I'M ON 7 BUT ALWAYS UPDATING LIKE A GOOD GOY I'M SAFE?
C'MON YOU FUCKS JUST GIVE ME A REPLY

File: 132650410486.jpg (9KB, 239x152px) Image search: [Google]

9KB, 239x152px

>UPDATE UPDATE UPDATE

>"Unlike many other malicious programs, this one has the ability to move around a network by itself. Most others rely on humans to spread by tricking them into clicking on an attachment harbouring the attack code.

>By contrast, once WannaCry is inside an organisation it will hunt down vulnerable machines and infect them too. This perhaps explains why its impact is so public - because large numbers of machines at each victim organisation are being compromised."

http://www.bbc.com/news/technology-39901382

HOLY FUCKING SHIT.

General reminder that you need at least KB4012212 for windows 7 KB4012216 for windows 8.1 and KB4013429 for windows 10.
You can download the patches from Microsoft's servers by clicking on the OS you have in the table which will take you a download page for it.
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
It is also acceptable to install the later cumulative security updates which contain the older fixes.
If you don't want to update at all then you can disable SMB entirely (is enabled by default all windows versions).

WINFAGS BTFO

FUCK TECH ILLITERATE WINBABBIES

Russian h4ck3r here. I made the viruz.
Asks me anything.

>my ISP blocks all my ports because fuck you
>my ISP gets infected anyway
well thanks IT faggots

>>60355638

Alright windows update seems to be taking forever. I've disabled SMB1 and port 445. Am I safe?

Well fuck. What are the odds shit will be fine in 7 hours? I just turned my PC off

>>60355687
Just get Linux

>>60355687
yes, you gullible faggot, you are safe, good goy

>>60355687
delete your system32 folder

>>60355687
windows update services have been infected

>>60355704
But Americans made the virus?

File: IMG_0528.png (5KB, 295x295px) Image search: [Google]

5KB, 295x295px

Fucking Winniggers BTFO
Linux wins again

File: Screen Shot 2017-05-12 at 20.50.53.png (963KB, 958x920px) Image search: [Google]

963KB, 958x920px

https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b168

>>60355690
Someone still needs to run it manually in the network you fucktard.

>>60355704
what's your name?

Most press report only around $9000 on bitcoins paid so far. Isn't that stupidly low.
Surely whoever deploys this viruses expect far more.

File: received_1353718238051980.jpg (34KB, 500x500px) Image search: [Google]

34KB, 500x500px

I'm on the latest update, but I have multiple terabytes of stuff and no means to back them up at the moment. While I'm not infected I'd like to try and protect myself as much as possible.

>hurr install Linux
All my devices except my desktop run non dualbooted Linux Mint, because I need Ableton.

What do

>>60355690
>"Unlike many other malicious programs, this one has the ability to move around a network by itself

Isn't it normal for ransomware to do this? That's why you're not supposed to let the compromised computer touch the network.

>>60355704
How many money/BTC have you made so far?

File: 1486256752362.jpg (34KB, 480x480px) Image search: [Google]

34KB, 480x480px

>>60355704
Idi nahui suka blyat?!

[GO]

>>60355615
why aren't the function names mangled?

>>60355704
You will get caught within the next 24h, and you will spend the next trillion years in prison. Have fun

>>60355720
Americans works for russians.

>>60355728
disconnect from the internet you FUCKING RETARAAAAAAAAAAAAARD

So am I the only person who was keeping current with manual security only updates?

That seems pretty fucking basic.

>>60355687
disable samba v1, block port 445

>>60355682
That's not how any of this works.

>>60355728
stay on mint until this blows over anon, and thank god you were smart enough to have mint as dual boot

>>60355698
This is why they have been full botnet with forcing updates in win 10 since your average user doesn't touch them and then gets infected with this shit which infects everyone else.

>>60355615
>some kid wrote

NY Times says that NSA tools got leaked to the skiddies.

>>60355690
dumbposter it's not something new
>getting netsec news from a normie newspaper

>>60355726
Ivan Ivanovitch Ivanov

STOP BING RETARDED FAGGOTS

EVERY HOME ROUTER IS BLOCKING EVERY PORT

SO ONLY IF YOU MANUALLY OPENED PORT 445 YOU CAN GET THIS SHIT

IF YOU DIDNT OPENE PORT 445 YOU DONT HACVE TO DO ANYTHING

File: lool.png (39KB, 804x437px) Image search: [Google]

39KB, 804x437px

>>60355727
only $2052 dollars actually

HOW SERIOUS IS THIS? IS SHIT ACTUALLY GOING DOWN SOMEONE TELL ME HOW BAD THIS IS SHOULD I BE WORRIED AND PREPARE FOR A SHIT STORM OR IS IT NOTHING TO REALLY WORRY ABOUT?

I can't see the ransom so would updating now prevent me from getting infected?
Or will updating now activate the ransomeware?

Can someone poz my computer with the virus?

I want its hot, sticky, infected bytes up my harddrive

>>60355727
He probably expected far less. He's probably pissing himself now that his worm infected government computers around the world. If he made even the slightest error in his own security, he's fucked.

File: lel.jpg (142KB, 1012x712px) Image search: [Google]

142KB, 1012x712px

http://www102.zippyshare.com/v/FGsn4AUy/file.html

:^)

>>60355741
because there's no mangling in C
and you can use a plugin to demangle names in ida

>>60355759
And some kid picked them up and created this shitstorms

>>60355615
So this is how Microsoft gets the world to use Windows 10?

>>60355690
>Unlike many other malicious programs, this one has the ability to move around a network by itself.

Basically a worm.

>>60355772
seriously? nice

>>60355735

Yes but many of them tried to do it but sucked at it. This one seems to work better in the wild.

Godadmn wikileaks, why did you leak the goddamn code

File: SteamOS_Logo.png (56KB, 370x172px) Image search: [Google]

56KB, 370x172px

AND THEY TOLD ME I WAS CRAZY

AND THEY LAUGHED

WHO IS LAUGHING NOW, EH?

>>60355726
Vladimir

>>60355736
Trillions. We will use them to pay for world warz 3 and pizza

>>60355737
Yes

>>60355742
Prisons work for russians

File: 1469758534469.jpg (30KB, 600x518px) Image search: [Google]

30KB, 600x518px

>literally everyone here uses windows
I thought this was a technology board?

So do these companies allow SMB over the internet for their employees or what?

File: 1483587203666.png (17KB, 328x215px) Image search: [Google]

17KB, 328x215px

>>60355725
Well that's somewhat of a relief. So as long as ISP don't get infected themselves everything will be okay?

>>60355773
LMAO

Any other infected anons in here?
I work for a bank, after coming home got a call from my coworkers telling me all the machines started rebooting. Is that the fucking virus or is an unrelated thing?

>>60355808
Why do you think others would care? Stop being a fucking retard.

>>60355800
Maybe if the nsa didn't hoard exploits for themselves to use this shit wouldn't have happened

>>60355808
it is, this is just the /v/fags getting weeded out

File: 1392645684218.jpg (20KB, 350x350px) Image search: [Google]

20KB, 350x350px

>Meanwhile wallets for the digital cryptocurrency Bitcoin that were seemingly associated with the ransomware were reported to have started filling up with cash

i feel bad for whatever skid made this worm, they're going to be in for a world of pain WHEN (not if) they get found.

I'm reading a lot of posts saying that this malware made just 2K. Wouldn't it use thousands of bitcoin addresses though? How are you guys monitoring them all?

File: 1494633017950.jpg (137KB, 1200x582px) Image search: [Google]

137KB, 1200x582px

>>60355774
see pic. Wait until someone disclose nuclear industry is also affected and they cannot shutdown the reactor.

>>60355774
If you're a kid or some NEET, don't worry too much. If you work in an organization that uses Windows and your job actually matters (meaning you have important documents on the job's server) or you connect your own computer to your job's network, then you could possibly get your ass fucked

>>60355758
Enterprise don't have to update. Also it can brake things especially with updating to a shitty version of driver, so don't justify their shit.

What would you do if you were the scriptkiddie anon who just wanted a few extra buttcoins from normie internet users to fund your anime figurine collecting hobby and wound up being the target of a multination manhunt after destroying critical and life-or-death infrastructure in the world's most powerful countries?

>>60355772
ISP routers come with all ports open to incoming. Given that everyone here uses wangblows, chances are they use whatever router their ISP gave them and never bothered to configure.

>>60355815
Companies get infected by idiots employees responding to spam and idiot admins not having port security, patch management, and letting users run on admin accounts.

>>60355778
They probably expected people to actually update their shit and maybe catch out a few people who didn't update over the past 2 months. Seems lots of people are ignoring security updates.

>>60355808
Woah, every user on /g/ is in here? Amazing.

The Linux users don't need to post; just laugh

>>60355808
linux spergs are a loud minority

>the person who let this get out of control will spend the rest of their life in prison when they just wanted to fuck over a handful of people
kek

/g/fags i'm scared...

>>60355772
but I torrent my animu from port 445!!

>>60355837
*laughs in russian*

>>60355833
Trillions of thousands

This fag that wrote this is probably hiding somewhere in the montains now

his shit fucked up hospitals in UK and people will probably die because of this, so im guessing the goverments are
already using military tier shit to find this faggot

>>60355713
how to disable smb1 on w7?

>>60355837
>blaming the malware
>not the government for using wangblows in the current year to handle critical patient information

So on a scale of 1 to 10 how fucked will the creator be?

>>60355615
My Retina MacBook doesn't have this problem.

>>60355803
>debian with preinstalled steam
why

>>60355824

It was patched in March though lol.

If your boss has you on an annual update schedule get a new job.

>>60355841
420 FAGGOT

>>60355642
Which bank subsidiaries are owned by the Rothschilds? Isn't Goldman Sachs one of them?

File: 1492010016538.jpg (27KB, 294x325px) Image search: [Google]

27KB, 294x325px

>>60355873
Skazhi pozhalusta comrade, why are you so mean to UK hospitals?

>>60355773
There's not just one address being used...

>>60355833
It doesn't, the retard that made this virus uses the same three addresses which makes it impossible to confirm payments.
It's a broken piece of script kiddie shit.

>>60355877
turn off wifi
unplug ethernet cable

File: images (3).jpg (8KB, 225x225px) Image search: [Google]

8KB, 225x225px

>>60355615
>mfw winfags pretend they use windows because they have "actual jobs"
>mfw "actual jobs" are getting BTFO for using an insecure unprofessional piece of shit
>tech illiterates getting btfo left and right
feels good man

>>60355877
https://support.microsoft.com/hr-hr/help/2696547/how-to-enable-and-disable-smbv1,-smbv2,-and-smbv3-in-windows-vista,-windows-server-2008,-windows-7,-windows-server-2008-r2,-windows-8,-and-windows-server-2012

>>60355837
>get utterly fucked by GCHQ

it was probably GCHQ who wrote this worm

File: 1494600652060.jpg (185KB, 1698x1140px) Image search: [Google]

185KB, 1698x1140px

>>60355758

This really makes your almonds flare.

This is precisely why, although extremely annoying and intrusive, the new windows update system for W10 was not made like that because they are assholes.

Shit users ruin everything for everyone as usual.

>>60355902
Yes

>>60355803
>gnome
ew

File: BC.jpg (66KB, 840x352px) Image search: [Google]

66KB, 840x352px

>>60355773
Over the three addresses they've earned a bit more. Still fuck all for the shitstorm they've found themselves in.

The guys that wrote this crap are probably already dead in a ditch.

>>60355839
>Enterprise don't have to update
They should at least be putting through critical security updates (not drivers or software fixes or anything like that) that are 2 months old.
I can understand a few weeks of testing for stability, but leaving things for so long is what causes this kind of shit.

>>60355907
but how will i shitpost?

>>60355876
What if it is the government doing this tho???????

>>60355891
that was when assange and co leaked the whole thing right, cyberweapons having fucking anime names lel

File: Worries.Drink.Alcohol.hahatimefordepression.jpg (7KB, 224x217px) Image search: [Google]

7KB, 224x217px

I have samba shares on Linux, am I fucked?

How can you secure important data against this and similar ransomware? It encrypts every storage device connected to the PC, right? What about remote data like Dropbox? Seems like that could potentially get encrypted too.

REMINDER

MILLIONS OF DOLLARS HAVE ALREADY BEEN DEPOSITED TO THE SCRIPTKIDDIE'S BITCOIN WALLET

WHOEVER FINDS HIS WALLET IS A MULIT-MILLIONARE

THIS IS A REAL LIFE "RAT RACE" MOVIE AND YOU'RE ALL MISSING IT

SEARCH THE BLOCKCHAIN

>>60355873
But senpai Russia is the most affected country.

>>60355842
Lol nice ISP you got then. Every single ISP I had, had all ports but 80 blocked by default. Most ISPs block all but essential ports.

>>60355837
> running a "critical system"
> no backups
AYYY LMAOOOOO, it's totally the ransom's fault

>>60355837
jesus christ

>>60355932
gentoo

>>60355920
:(
Also, why are UK hospitals connected to the internet? Why not run computers with data in LAN?

>>60355881

Depends how state sponsored he is. If he is sitting in an MSS or Nork safehouse not much. Well maybe. inb4 under $3000.00 in ransoms.

File: 1435750553158.gif (3MB, 740x416px) Image search: [Google]

3MB, 740x416px

I CANT UPDATE
Help me I can't update windows 7.
I think I'm fucked it's just checking for updates and not finishing.
I haven't updated since jan 2016.
God I'm so fucked.

>>60355941
he didnt even collect 10k, fuck off faggot

Update: looks like Daiz was behind this too.

>>60355924
>it was $300 per bitcoin when I was last interested
>didn't invest because I thought it was a meme

well fug

>>60355941
uh no
it's about 9k for the three addresses so far

>>60355934
Prepare for WWIII

>>60355972
this, how do we stop him?

>>60355955
To watch videos of usa fucking them in the ass

>>60355940
M-disc is your best bet, once you write data to them you can't write to them again.

File: 1490171761981.jpg (197KB, 1483x600px) Image search: [Google]

197KB, 1483x600px

https://www.symantec.com/connect/blogs/what-you-need-know-about-wannacry-ransomware

if you haven't already patched should you patch right now?
only smug anime girl replies will be considered genuine

>>60355881
If they get him on the "wont see the sun again for the rest of his life" scale. I just hope it is not some stupid script kiddie.

>>60355934
which one

File: Dog-Bounty-Hunter-tv-10[1].jpg (56KB, 445x668px) Image search: [Google]

56KB, 445x668px

>>60355941
>WHOEVER FINDS HIS WALLET IS A MULIT-MILLIONARE

On it.

File: Capture.png (6KB, 1421x161px) Image search: [Google]

6KB, 1421x161px

Is this how I block?

>>60355831
How would they be found?

>>60355918
Gotta cater to the lowest common denominator in modern society sadly.

>>60355936
that was actually a different leak.
this backdoor comes from an earlier leak. Came from an NSA contractor, based in italy iirc, who had literally gigabytes of nasty shit like this.

This all happened because Spaghetti wrote this worm to bring down the cabal but it somehow spread to the internet and infected the world.

>>60355774
It's very bad, seriously. Move to free software till it's not too late.

>>60356006
The secret one...

>>60355938
systemctl stop smbd

Hold the phone fuckers, it only affects win 7?

>>60355963
If you can't update then your computer is most likely already infected. The virus disables updates and stays dormant until the next "wave" of attacks that are synced between computers for maximum effect. Next wave should come in about one week if the code hasn't changed since version 1.0.

>>60355881
10

You have every state cryptography agency looking for him now

File: 1494610234177.png (703KB, 855x640px) Image search: [Google]

703KB, 855x640px

>>60356034
nope

>>60355973
I considered buying a shit ton ages ago. The price went over $1 and I thought "fuck that it costs too much".

Well sheeeeeeeit.

File: update.png (9KB, 578x150px) Image search: [Google]

9KB, 578x150px

hhhhhnnnnnnnnngggggg

>>60356044
How'd they get it?

welp winfags I meme a lot about your shitty OS but this looks pretty bad and I feel bad.

good luck anons

Is there any way to recover from ransomwear?

>>60356034
Also systemd, stop using systemd

I bet all you boys who turned off windows update over fears of microsoft spyware are really regretting your decisions now.

>>60356046
Don't worry, this is going to crash the market.

>>60356049
SAVE YOUR FILES NOW

YOURE FUCKED

>>60355944
Why would http be open?

>>60355963
Just manual update it. You can download the single thing with >>60355692 though you may want to look into your windows update as problems with it normally indicate problems elsewhere as well.

>>60356044
based

>>60355692
i thought you only needed to disable smb1

>>60355963
It's normal for the updater to run that long.
But by "long" I talk to max 1-2h, if it doesn't stop after that then as >>60356036 says is probably infected
Also stop being a faggot

>>60356059
pay up, goy

>>60356015
No..that's how you open. The chances are it is blocked already. Enter ports into http://www.whatsmyip.org/port-scanner/

If you don't want to install windows update

find a firewall to install

>>60356059
restore from a backup or crack rsa

>>60355820
I might be wrong about this, but I don't thinks ISPs are connected to you via TCP/UDP.

They are connected to you on the physical layer of the internet. You connect to others via their infrastructure. Your traffic doesn't go through their computers, afaik. So whatever malicious shit is on the web, it may travel to you only if you access it somehow or if you have a service running on your computer which keeps port 445 open and can be connected to remotely.

File: 1490484827624.jpg (119KB, 1320x908px) Image search: [Google]

119KB, 1320x908px

>>60356034

All Windows machine from Vista up.

Windows XP is ironically safe.

Although all you had to do was to fucking update your windows in the last 4 months.

You pretty much deserve it if you got it.

>>60355918
>mfw

>>60356049

HIDE

>>60356059
just boot onto your linux partition

https://www.youtube.com/watch?v=eNxycOyfdaQ

pay debts

>>60355881

Codename "The Extraditables". ^__^

Imma head to sleep. Shit's gonna be fine in 10 hours right?

>>60356054
i don't know

>>60355897
Literally every one of them

File: wewww.jpg (25KB, 484x235px) Image search: [Google]

25KB, 484x235px

ill let u guys know how it goes ;3

Is the 4012212 update for win7 legitimate or is it a virus as well?

File: 2017-05-12_171018.png (4KB, 574x117px) Image search: [Google]

4KB, 574x117px

How fucked am I?

>>60355881
He's holding a hospital ransom, and people are going to die as a result. Hopefully the government don't act like a bunch of pussies and just kill the fucker.
Either way, if I was in his position I'd be using that $9k to purchase a helium tank.

>>60356096
>Windows XP is ironically safe.
No, most infected computers are XP.

>>60356059
At work we just shred the hard drive if an employee has it. No point in trying to throw a new image on it because we don't want to risk it touching the network.

If it's something important we use an earlier snapshot or backup

>>60356026
I hope this finally forces governments around the world to work together and take that sick fucker down

>>60355876
Can they trace him based on the compiler he used to compile his ransomware?

I've been looking at the infection map for a while now. Still nothing in Northern Europe.

>>60356082
Is it normal for it to take forever to download updates, as well? It's like it doesn't even start. Had this issue since 2015.

>>60355963

If you are using telemetry killers you might have to check the settings on them.

>>60355837
oh poor habib can't get his cancer treatment

>>60355969
>Cause potentially millions of dollars of damages and potentially cost lives or cause medical harm
>Only get 10k out of it

The scriptkiddy who wrote this shit has gotta be in a mad panic

if you just ran windows 98 you wouldn't have to worry about any of this

>planning to build a new desktop computer for my mother before I move overseas
>tfw she loves her Windows programs
>tfw debating whether or not to force her to use Linux or just slap on Windows 10

At least I got my father to use Linux on his laptop.

>>60356078
That's what the last line says if you read it. Though getting the security updates is advisable for other vulnerabilities.

So what happens if some nuclear power plants are running windows 7 and they get infected?

disable all SMBs?

>>60356085
If it says "timed out" does it mean its closed?

>>60355941
can you track where the bitcoin ends up?

Vista is okay, right?

What windows features should I disable and what ports should I check to see are closed/open and what updates should I have to keep me safe from this degenerate NSAmalware?

File: update2.png (17KB, 648x512px) Image search: [Google]

17KB, 648x512px

oh shit

DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED
DON'T INSTALL UPDATES
>WINDOWS SERVERS HAVE BEEN COMPROMISED

>>60356133
Nice
t. finlan :D

>>60356162
No, it means you've been a bad boy opening your ports to strangers

>>60356169
install gentoo

>>60356169
>What windows features should I disable

Windows.

>>60356171
pls be fake

>>60356156
are you implying that a nuclear powerplant is running Windows to control the reactors?

File: 1nfrux.jpg (9KB, 400x217px) Image search: [Google]

9KB, 400x217px

>>60356146
>thinking this wasn't a state level actor who will for the time being remain unnamed

>>60356036
>>60356082
oh I waited 5 minutes for it but I guess I overreacted.
Thanks guys, i'll wait a bit longer.

>>60356124
Are there any antivirus/antimalware that can detect ransomware? I have critical documents backed up but none of my porn is

>>60356059

Depends on the variant. Some are weak as shit. Others don't kill shadow volumes. Some like Locky are fortresses unless a State has it vaulted somewhere.

Imagine how many poojets just got BTFO, this is truly the equivalent of the day Trump won on /pol/.

who here /phoneposting until it all blows over/?

>>60356156
every us nuclear plant runs on hardware from the 60s
there's a doc about it, they have those big o floppy disks to actually launch the icbms

>>60356120
That is the creators update (redstone 2) you will still need the security update.

File: tumblr_o6crjzE5hk1v0pigno1_500.jpg (45KB, 409x409px) Image search: [Google]

45KB, 409x409px

>tfw safe because I have Windows 10
And i was told not to get Windows 10 cause I was gonna get spyed on, top kek.

>>60356156
how can that ever happen? arent they supposed to run embed systems?

>>60356055
>I meme a lot about your shitty OS but this looks pretty bad and I feel bad.

Sudo apt-get feels
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package feels

>>60356217
me
but how long

>>60356199
windows xp too

>>60356199
>to control the reactors
doesn't need to do much more than control one thing hooked to something hooked to something hooked to a reactor though

File: 1492178677845.jpg (45KB, 657x527px) Image search: [Google]

45KB, 657x527px

>>60356171

Hoax. Also, shitty bait only the newest fagggets will fall.

>>60356120
Build 1703 from windows 10 isn't affected.

>>60356199
no

>>60356170
Lies. WSUS offline creator can get to it just fine.

>>60356193
>>60356192
memes aside gimme an answer

File: 1404007017135.png (150KB, 392x302px) Image search: [Google]

150KB, 392x302px

>>60356171
Fuck man, pls be pulling my leg.

>>60356220
I work at a nuclear power plant. That's absolutely wrong.

I'm surprised no school networks have been reported infected yet. You'd think they'd be the biggest targets with so many computers on a single network.

>>60356156
Temporary shutdown while they do a backup?

If they haven't been infected yet I doubt they will, SCADA/ICS places will be on total sandbox mode

>>60356208
if you just have the .exe without clicking on it, maybe. But if you click it, you're already screwed so no point in try to scan it. The shit is encrypted.

>>60356154
you said disable smb which includes smb2 and 3, do i need to disable smb1-2-3 or smb1 ?

File: OOOOOOOOOOOOOOOOOOOOOOOOOOO.gif (2MB, 200x200px) Image search: [Google]

2MB, 200x200px

>>60356171
Okay, that's it, fuck this. I don't care if this is a LARP. I'm pulling out my ethernet and backing my shit up until this blows over.

>>60356213
>board still slow as fuck
eh still funny I guess

it'll already start to die down with the early return domain being sinkholed
just before it became a major shitstorm too

>>60356156
Nuclear reactors should run a custom OS/Linux with no internet connection.

>The spread of the Wana Decrypt0r ransomware has been temporarily stopped after security researcher MalwareTech has registered a hardcoded domain included in the ransomware's source code. Wana Decrypt0r connected to this domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com) before it started its execution. With the domain down, the ransomware does not start anymore. Cisco Talos has confirmed the information.

>>60355615
>close port 445
>using SMB
I always knew that shit was a huge attack vector.

Serves them right for using such an insecure protocol.

>>60356017
Well, those bitcoins need to be exchanged eventually.

>>60356227
Previous versions are safe too, if they're up to date.

>>60356269
>mfw I have Super Mario Bros 2 on my computer

Am I fucked?>>60356270

>>60356278
they run QNX/BB10 ;)

>>60356138
If the download doesn't even start as you say then you got some old-ish worm which interferes with the download.
There was a protocol to remove it and allow Windows update to work properly... somewhere out there. Google is your friend.

File: 1494634152921.jpg (47KB, 580x346px) Image search: [Google]

47KB, 580x346px

>>60356055
don't feel bad, we warned them over and over, they didn't listen

>>60356278

Inb4 ACDC.

>>60356227
see: >>60356044

File: 1489268412681.jpg (73KB, 750x719px) Image search: [Google]

73KB, 750x719px

Windows 7 updated with simplix, i'm gonna die

>>60356261
Schools generally update their computers

WHY I CAN'T DISABLE SMB
SAYS ITS NOT ALLOWED

File: 04b87d0c663cb4525df40c2d51db2caf[1].jpg (752KB, 900x588px) Image search: [Google]

752KB, 900x588px

>>60356242
nah, nuclear reactors are controlled by analog technology just because of stuff like this

you cant hack analog

>Updates were installed: 06/26/2016

Wow, I should really update, but I'm probably already fucked

>>60356199
Iran was using Windows Server to run its centrifuges, that's how stuxnet shut it down

>>60356278
>>60356156
NSA already made a virus for nuclear plants :^)
https://en.wikipedia.org/wiki/Stuxnet

Only a matter of time until some script kiddie uses it too.

File: wewwww.jpg (41KB, 535x284px) Image search: [Google]

41KB, 535x284px

>>60356115
what do? i dont ever remember installing any updates but i dont run many .exes these days...

i think im safe anyways desu just worried about someone else on my network fuckin up

>>60356281
my nigga

>>60356317
Why do you want to disable SMB you moron?
Just patch your fucking system manually or check that is updated to at least april 2017

>>60356269
You don't need smb so you can disable them all.

>>60355615
>then at least close port 445 on your firewall
doesn't every router block this port by default?

>>60356301
I don't think so. The issue started when they started pushing Windows 10, and when I formatted my computer it fixed it, and then a month later it broke after another big windows update. Some website I got linked to in a previous thread mentioned it and it lined up perfectly with what I experienced.

>>60356317
it's too late anon

unplug your computer and install gnu/linux

you can burn a clean copy with your raspberry pi and a usb burner, or a usb stick

oh yeah you made fun of the people who bought those, didn't you, and now you're fucked because you were too retarded to figure out why

>>60356138
http://wu.krelay.de/en/

I've had to do this on 3 computers in the past year. Basically MS fucked their own shit up and you can't connect until you manually install the two updates listed here

>>60356166
his next 'program' should be a script that randomly distributes his BTC to random addresses. Maybe cause confusion enough give him enough time to pick out a nice treetop, spend the remainder of his miserable existence hiding in.

>>60356343
welp you're right
also i guess i shouldn't care since my router doesn't have these ports open so whatever

I'm trying to get the single update from>>60355692
to work but when I run it it just gets stuck on "searching computer for updates". What do I do?

>>60356336
>Updates not installed since 20/08/2015
You're SO fucked up, by the moment you catch up to the patches you need you will be infected already

>>60356296
kek

>>60356322
it's all scada now

43% update
zzz

>>60356341
TO BE SAFE
>>60356359
FUCK OFF I NEVER MADE FUN OF LINUXFAGS

>>60356322
>you cant hack analog
and there is were you are wrong kiddo

how would they get me if I'm behind a router?
aren't routers supposed to block all incoming traffic unless specifically enabled?

Any TinyWall users here? How do i block that port here?

>>60356169
Windows features are not really features lmao

Get cucked

>>60356375
that doesnt make any sense... by the time i get the patches i need from the microsoft server ill have the patches i need...

For anyone who hasn't started doing so now might be a good time to consider installing "security only" updates regularly.

https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/

>>60356370
You should be fine, though it is probably better to be safe than sorry in case something fucks with your router.

>>60356277
>>60356280

File: update.png (5KB, 632x63px) Image search: [Google]

5KB, 632x63px

Is this the right update to be safe?

>>60355822
Im serious guys. A bank got goddamn hacked.

>>60356404
>aren't routers supposed to block all incoming traffic unless specifically enabled?
no

File: BillGatesonPhone2.jpg (19KB, 140x140px) Image search: [Google]

19KB, 140x140px

>"It's done."

>>60356412
It will take like, 3+ hours to patch everything from that old build you have, chances are you will end up infected in that time anon, that's what it meant

>>60356405
back to >>>/b/

>>60356368
what if he just sends it to a random ass adress nobody has created

>>60356336
If anyone in your ISP gets it, you will get it

Just patch your shit homo

File: glorious - Yotsuba.jpg (75KB, 734x404px) Image search: [Google]

75KB, 734x404px

>>60356280
Thank god!!
source?

guys im scared, how do i pirate Win 10?

does DAZ Loader work with it? im on a Win7 installation now from 2008 and never updated it

It only encrypts these files:

.lay6
.sqlite3
.sqlitedb
.accdb
.java
.class
.mpeg
.djvu
.tiff
.backup
.vmdk
.sldm
.sldx
.potm
.potx
.ppam
.ppsx
.ppsm
.pptm
.xltm
.xltx
.xlsb
.xlsm
.dotx
.dotm
.docm
.docb
.jpeg
.onetoc2
.vsdx
.pptx
.xlsx
.docx

You can save all your shit with a linux liveCD and then just format your HDD.

File: 059bbb0a5c13c95fd33dd176cab51a6b-imagejpeg.jpg (109KB, 800x600px) Image search: [Google]

109KB, 800x600px

>>60356395
>FUCK OFF I NEVER MADE FUN OF LINUXFAGS
You didn't install it though when we told you to either.

Install it now.

>>60355615
Do we know from where the ransomware attack came?

>>60356404
lol

>>60356404
How would you even post on 4chan, retard?

File: 1493823254367.png (1MB, 1600x900px) Image search: [Google]

1MB, 1600x900px

>>60356449
gentoo appreciation post

File: Screenshot_20170513_032324.png (78KB, 912x406px) Image search: [Google]

78KB, 912x406px

>>60356447
Wrong.

File: maxresdefault.jpg (98KB, 1920x1051px) Image search: [Google]

98KB, 1920x1051px

>>60356447
>.djvu

>>60356368
No yeah, it should be per host and collected by some C&C and hopefully ran in a piggybacked network from an Chinese sweatshop.

But really, though can you track where the bitcoin ends up? I'm not well verse in it. If he transfers it, the new account will be seen in public blockchain info?

>>60356364
I've already got the first servicing stack update. Do I need to bother with the more recent bolded one?

>>60356447
good, my animus are safe

File: Screenshot from 2017-05-12 20-20-10.png (283KB, 1920x1080px) Image search: [Google]

283KB, 1920x1080px

>>60355728
Anon, put virt-manager and qemu-kvm on your linux machine and run a windows VM.
Install qxl w/ spice drivers to your VM. Use virt-io for HDD in your VM.

It won't have any 3d acceleration but you can work with ableton seamlessly through a VM window and share files with your host through SMB or filesystem passthrough.
This is the end all be all, solved all my issues, and I won't ever go back.

>>60356374
Try the windows update troubleshooter
https://support.microsoft.com/en-us/help/971058/how-do-i-reset-windows-update-components
Click the arrow next to the OS you are using and then download the troubleshooter which should go through and maybe find/fix the problem.

>implying this isn't a microjew ploy to get everyone to upgrade to W10

>>60356447
Not even videos or images outside of jpeg?
What kind of a pussy ass virus is this? I have nothing to lose.

If anything, this is going to finally kill the average Joe's belief in crypto.
When they see
>Send Bitcoins here, or you're fucked.
Popping up all across the place and killing their computers, there's no way in hell that it's going to get public to trust it after that.
Especially if someone dies in a hospital because of this attack fucking up the hardware.

>>60356426
sorry, no more work for you
your employer will soon go bankrupt

>>60355687
Yes, Windows 7 gets regular security update just as any other recent/new operating system. It's just that Microsoft stopped software updates but security will end until 2020 at which year I will be running non-windows os or maybe Windows 8/8.1 if needed.

File: chicken wang.jpg (233KB, 1484x1120px) Image search: [Google]

233KB, 1484x1120px

>>60356453

^___^

https://www.youtube.com/watch?v=T8HXYnjfPmg

>>60356491
I've done that three times now. it says it resolves the issues, but still doesn't work.

>>60356374
literally two posts above you, tard >>60356364

File: Most Curious - Eru.jpg (77KB, 637x685px) Image search: [Google]

77KB, 637x685px

So which Linux distributions are fucked? Do they all have samba up to date?

File: 1487662105596.jpg (126KB, 640x902px) Image search: [Google]

126KB, 640x902px

>last update was installed at 5/9

feelsgood.png.exe

File: oh no.png (11KB, 185x82px) Image search: [Google]

11KB, 185x82px

guys i'm scared what if i use vista or XP?

i'm scared to turn the computer on now

>>60356482
lel

File: smallLain2.gif (4KB, 240x300px) Image search: [Google]

4KB, 240x300px

Hacker missed a real opportunity here. I would have made it just to display Lain on all computer screens around the world. Imagine the shitstorm.

File: IMG_3205.jpg (54KB, 512x480px) Image search: [Google]

54KB, 512x480px

>tfw I run my SMB shares on linux

>>60356447
>It only encrypts these files:
>.jpg

this has screwed with the world wide pepe economy, what was a rare pepe yesterday is now an extra rare, and what was common is now rare. check your pepe values now.

>>60356525
most infected computers are xp so take a guess

I think I have auto updates on for important ones. Is it an important update?
If not imma go check.

File: 14242764225426442.png (39KB, 180x219px) Image search: [Google]

39KB, 180x219px

https://intel.malwaretech.com/WannaCrypt.html

>>60356525
Vista uptodate is ok
XP you are fucked either way.

>>60356534
>not using sshfs/sftp

>>60356517
Try
https://gallery.technet.microsoft.com/scriptcenter/Reset-Windows-Update-Agent-d824badc
for a full reset

File: bognov.jpg (20KB, 236x357px) Image search: [Google]

20KB, 236x357px

>>60355642

Rothschild monkeys!

>>60356525
>turn on the pc without connection
>block port 445 in the firewall
>connect again
Should be enough

>>60356096
it was patched by MS in March 2017

>>60356517

You must first update the windows update client.
Only after that you can start installing updates.
I've wrestled with this shit multiple times and it's the outdated updater itself that fucks it all up.

>>60356525
vista got the update, it just depends of if you kept your vista install up to date. m$ dropped all support for xp so thats why xp systems are extra vulernable.

>>60355615
Literally a new windows 10 Microsoft push

>>60356573
SMB is the most compatible and works on virtually any OS

File: 1381251640718.jpg (350KB, 900x900px) Image search: [Google]

350KB, 900x900px

>>60356494
That's exactly what it is.
Sneaky jews thinking they can get me to update.
They're even in these threads shilling their shitty w10.

>mfw w7 with windows update disabled since 2012

>>60356525
Vista SP2 has an update.
http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012598

everything is updated, port is blocked and smb is offline
AM I SAFE GEE?

File: 1469075429374.jpg (214KB, 499x618px) Image search: [Google]

214KB, 499x618px

>>60356540
i guess i'm rich now

File: tumblr_inline_oh2rcavmI01tqmwkj_500.png (254KB, 500x532px) Image search: [Google]

254KB, 500x532px

>>60356521
Honestly, fuck samba.
Just use NFS or sshfs.

Point to point, tunneled, file sharing is pretty much the whole goal of sshfs and suits my needs just fine.

>use a cracked version of Windows 7

Am i ok?

>>60356577
The Bogdabots are wreaking havoc on computers worldwide

>>60355837
>Poorly secured network in hospital
>No failsafe or backup system in place
>Using insecure windblows on every computer
>Get completely fucked by malware
>Malware is using code written by government intelligence agencies
>Demand the government do something about this self-made disaster

>>60355615
A patch for the vulnerability was released by Microsoft in March for windows 10 that is.

>Learn cybersecurity from books and college courses
Malware worm destroys your network
>Learn cyberecurity from jerking off and watching Battlestar Galactica
smugpepe.jpg

>>60356368
If I was him I'd seek asylum in Norway, they don't have the death penalty and their longest prison trrm is no more than 20 years in a comfy mini apartment prison cell.

File: GCHQ-taps-can-intercept-U-010.jpg (40KB, 460x276px) Image search: [Google]

40KB, 460x276px

>>60355837
oh this skid is will be totally fucked alright, the PM called a snap election in the UK and this is exactly what she did not want under her strong and stable leadership (tm)

>>60356285
People use bitcoins every day, he'd just be one of them.

>>60356487
praise Daiz for inventing mkv!!!

>>60356628
Govt won't admit fault as it was compromised itself

>>60356608
hope your pc gets hit, /v/tard

>>60356478
Can I get that pape? Comfy as fuck, and the barefoot Miku is a nice bonus

>>60356613
yes unless reports are wrong and the fucker is using a non reported zero-day exploit in which case no one will be safe.

>>60356625
Just get the right updates and close your ports and SMB

>>60356625
you're the most fucked, just backup and wait it pop up

>>60356605

And also the most vulnerable.

A patch for the vulnerability was released by Microsoft in March for windows 10 .

>>60355884
Of course it doesn't, this is a software issue.

Am I safe enough by blocking port 445 on Windows firewall, or can it still get through?

90,000 computers infected, according malwaretech.

>>60356181
Booga booga

>>60355615
>then at least close port 445 on your firewall
Why would you ever leave this port exposed to the internet?

>>60356699

>90k

So literally nothing?

>>60356490
Will do anon, thanks for the info

>>60355841
Sell drugs

>>60356613
You're safe from THIS ransomware, but you could have been compromised at any time in the last month by anyone using the core exploit. This goes for anyone who hasn't kept their shit patched until now. I'm not even kidding, the minute this exploit was released, people were using it. There should be a sticky pointing this out!

Take the gloves off of Cyber Command now.

>>60356709
To share file with my friends?

>>60356655
You'll need to try harder than this if you want me to update, Shlomo Goldshoastein.

>be a pilot flying a Boeing 747 full of people
>weird window pops up on the cockpit screen
>"LandThePlane.exe has been encrypted."
>open /g/ on your phone to ask for help

File: 769951.png (3MB, 1920x1364px) Image search: [Google]

3MB, 1920x1364px

>>60356664