WannaCry: inside a devastating ransomware
summary
Explains how the WannaCry ransomware worked, covering its exploitation of the EternalBlue SMB vulnerability and the propagation mechanisms used to infect systems. Describes the impact on organizations, the role of a kill switch discovered in the malware, and lessons for patching, incident response, and preventing similar ransomware outbreaks.
AI-written summary · about
chapters (6)
- 0:00Introduction to WannaCry
- 7:30EternalBlue discovery
- 13:52Initial ransomware analysis
- 23:43Kill switch mechanism
- 26:13RSA key recovery in memory
- 32:54Conclusion and recovery solutions
related talks
19mThe Innerworkings of Ransomware
45mThe Invisible War A Look at the Ransomware Battle
52mWhat Will it Take to Stop Ransomware?
21mRansomware Attack: Lessons Learned
52mRansomware 101: Get Smart Understanding Real Attacks
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
32mSurviving a Ransomware Attack - Lessons from the Field
49mDissecting The Ransomware Kill Chain: Why Companies Need It