Eternal Blues

The WannaCry worm was one of the more notable attacks of 2017, and since it emerged in May there has been constant speculation about who was responsible for it. The White House this week sought to end that speculation by publicly attributing the attack to North Korea, saying that country’s government was directly responsible for the ransomware campaign and that it was part of a pattern of bad behavior from North Korea.

---

U.S. Government Officially Blames North Korea for WannaCry Attack

Homeland Security Advisor Thomas Bossert pinned WannaCry on North Korea in a Wall Street Journal op-ed Monday night.

---

Bad Rabbit Ransomware Hits Russia, Ukraine

A previously unknown strain of ransomware, Bad Rabbit, hit roughly 200 targets across Russia, Ukraine, and Bulgaria, on Tuesday.

---

South Carolina School District Does the Ransomware Two Step

A South Carolina school district is the latest to do the ransomware two step: assuring parents that data encrypted and held hostage by the criminals wasn’t “accessed” by them. Nice try.

---

Is a ransomware infection always a data breach? Yes.

FedEx’s disclosure of a material impact from NotPetya last week highlighted the awkward two-step that companies play around malware outbreaks and data breaches.

---

Material Impact: NotPetya Ransomware Drives Home Existential Cyber Risk for Corporations

FedEx briefly halted trading of its shares on Wednesday after reports that its TNT subsidiary was hit by NotPetya/ExPetr, a destructive wiper malware. Get ready for more.

---

Getting Ahead of Ransomware: A Q&A with Tim Bandos

Digital Guardian's Senior Director of Cybersecurity and F100 Threat Hunting and Incident Response expert, Tim Bandos answers your questions on how to recover from and get ahead of ransomware attacks.

---

Ransomware is Coming for You, Sooner or Later

It appears that this ransomware thing might be here for a while.

---

What I Learned About the State of the Threat Landscape and Preparedness in the Wake of WannaCry

Here are some lessons learned and thoughts for consideration following one of the worst malware outbreaks in recent history.

---

WannaCry: What’s in a name? Confusion.

The WannaCrypt ransomware was nothing special. Companies were done in by nasty software exploits and endemic insecurity in the form of unpatched and unpatchable legacy systems.

---