Mitigate Ransomware "WannaCry"

fredfox_uk

For a really good explanation of the killswitch take a read of this https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

zoro_2009

thanks

Mr. Jingles

@jimp:

It does not require any specific response, only that it can make an HTTP request to those domains.

[]
DO NOT BLOCK THESE DOMAINS, blocking solves nothing. It is not a C&C server, but a killswitch.

Dear Jim,

Could I ask why blocking the domain doesn't solve anything? In my humble view of the world, if it can't connect to it because it's blocked, it can't make a HTTP request?

Thank you :)

Derelict

How about you read jimp's post again.

mrgoogleip

I know some people that pay bitcoins for his information :'(

johnpoz

Exactly - pay attention to this part

" It is not a C&C server, but a killswitch."

This is why do not block the domain… But bring the domains online and let it make a http connection.