{"id":181,"date":"2017-05-09T11:23:56","date_gmt":"2017-05-09T11:23:56","guid":{"rendered":"https:\/\/www.tsfactory.com\/forums\/blogs\/?p=181"},"modified":"2021-09-23T06:24:36","modified_gmt":"2021-09-23T06:24:36","slug":"wannacry-the-blame-game","status":"publish","type":"post","link":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/","title":{"rendered":"WannaCry & the Blame Game"},"content":{"rendered":"

WannaCry and the Difficult Task of Preventing a Similar Attack<\/strong><\/p>\n

<\/p>\n

The first wave of ransomware attacks that inundated businesses around the world last week has apparently now passed, although it’s quite possible more infections will occur. The finger-pointing continues between the infected institutions and the companies and governments they believe could prevent outbreaks: Microsoft, the NSA, Russia, and even North Korea.<\/span><\/p>\n

But who is to blame? Like most things, everyone is at least partly responsible. The real question is what do we now to prevent future attacks.<\/p>\n

The Malware Developers <\/b><\/p>\n

Most of the blame will obviously fall on those who created the malware and unleashed it around the world, leading to one of the fastest-spreading and potentially damaging cyberattacks seen to date. It has infected institutions such as FedEx and the British National Health Service. For all their effort, the latest reports suggest the perpetrators have only netted approximately $55,000. <\/span>1<\/span><\/a><\/p>\n

The NSA – and Russian Intelligence? <\/b><\/p>\n

It has\u00a0<\/span>been a matter of weeks since a hacker group called Shadow Brokers publically exposed a load of software tools believed to belong to the National Security Agency (NSA). It now appears one leaked NSA tools, an exploit of Microsoft Windows called EternalBlue, is being used as one method for rapidly spreading a ransomware variant called WannaCry across the world.<\/span>2<\/span><\/a><\/p>\n

Dumping the tools was clearly rash — but should the NSA have developed them in the first place? Intelligence agencies have a long history of spotting weaknesses in software, and while most weaknesses are passed on to software vendors for patching, they withhold some for their own hidden agendas. The result is known security flaws remain unrepaired in the operating systems for other nefarious organizations to exploit. <\/span>3<\/span><\/a><\/p>\n

Former NSA-contractor-turned-whistleblower Edward Snowden was more altruistic, tweeting: “Despite warnings, @NSAGov built dangerous attack tools that could target Western software. Today we see the cost.” <\/span>4<\/span><\/a><\/p>\n

Microsoft has long argued that this strategy is dangerous. If there is a security flaw in Windows, the company said, surely the safest thing to do is to make its development team aware to allow the flaws to be fixed.<\/span>
\n<\/span><\/p>\n

Microsoft<\/b><\/p>\n

Microsoft also needs to consider what obligation it has to update all users – not just the ones who pay extra for security updates on retired operating systems such as Windows XP. Updating a computer\u2019s operating system is easy and straightforward for individuals. However, for a network the size of Britain’s National Health Service, it is a \u00a0time-consuming, expensive and complex process.<\/span>
\n<\/span><\/p>\n

\u201cFor a company like Microsoft to say it won’t keep those systems safe unless they shell out more money, then that in itself is something of a ransom,\u201d Dave Lee from BBC North America wrote. <\/span>5<\/span>
\n<\/span>
\n<\/span><\/a>There are still millions of computers using Windows XP, and without customer support, they\u2019re all vulnerable \u2014 not just to this latest ransomware, but to dozens of other vulnerabilities unearthed in the last three years. They\u2019re easy prey for botnets, spyware, and dozens of other criminal schemes, a persistent problem for anyone trying to secure the web.<\/span>6<\/span><\/a><\/p>\n

North Korea<\/b><\/p>\n

The latest possible culprit responsible for the attacks has been the Lazarus Group, reportedly working out of China on behalf of the North Koreans. A Google security researcher discovered similarities between code found within WannaCry and other tools believed to have been previously created by the Lazarus Group.<\/span>7<\/span><\/a><\/p>\n

Those clues alone are not definitive, however. Hackers often borrow and retrofit one another\u2019s attack methods, and government agencies are known to plant \u201cfalse flags\u201d in their code to throw off forensic investigators.<\/span>8<\/span><\/a><\/p>\n

The Users – Where Actions Needs to Take Place<\/b><\/p>\n

The broader problem is software upgrades outrunning their hardware, and it\u2019s a problem that\u2019s much bigger than Microsoft. A computer sold in 2007 likely isn\u2019t equipped to run Windows 10 and millions of those old machines are still in use, which is why XP has remained neck and neck with Windows 8.1 in market share, despite Microsoft\u2019s best efforts to dislodge it. <\/span>6<\/span><\/a><\/p>\n

Why do some organisations stick with XP? Some of these PCs may be running XP-specific software for a particular task; others may not be internet-connected and are therefore somewhat less vulnerable. But it’s often an issue of cost, with organisations unable to afford to upgrade hardware and software — especially in the healthcare sector, where budgets are chronically tight.<\/span>
\n<\/span><\/p>\n


\nIn hindsight, sticking with XP may not have been the wisest move. Already politicians are arguing over whether a lack of funding was to blame for the National Health System being hit hard by the WannaCry ransomware.\u00a0<\/span>2<\/span>
\n<\/span><\/a><\/p>\n

Preventing Future Attacks<\/b><\/p>\n

When it comes to current software, effective incentives are needed to persuade organizations to maintain computer security updates. One solution suggests stronger rules are needed to force the disclosure of cyberattacks. Penalties may be needed to encourage everyone to become better cyber-citizens.<\/span>
\n<\/span>
\n<\/span>Many pieces of digital equipment \u2014 like the MRI scanners used by the UK\u2019s National Health Service (which run Windows XP), cannot be easily upgraded. The severity of last week\u2019s attack indicates a concerted effort to upgrade vulnerable systems is well past due. This scenario of laggard network infrastructure is reminiscent of the millennium bug, another serious threat that forced an overhaul of many computer systems at the end of the previous century. Today\u2019s cyber security crisis is beginning to look every bit as serious, and it demands an equally wide spread response. Governments and corporations alike must invest the time and money to keep us safe.<\/span><\/p>\n

Experts agree that the extent of this latest attack, impacting so many parties, and, in particular, critical care providers such as hospital systems, may in fact be the attack that firmly plants \u201cransomware\u201d into the mainstream and public discourse.<\/span>
\n<\/span><\/p>\n

Though damaging, the WannaCry worm was not the worst that could have happened. Nastier variants could have wiped out data on infected computers. The ransomware has been a costly nuisance. Next time, we might not be so lucky. <\/span>9<\/span>
\n<\/span><\/a><\/p>\n

Cybersecurity Software <\/b><\/p>\n

In the spirit of preserving sensitive data, session recording offers a way to protect accounts that may assist in forensic analysis and offer a layer of protection against ransomware viruses.<\/p>\n

Would you like to know more? Visit <\/span>www.tsfactory.com<\/span><\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

WannaCry and the Difficult Task of Preventing a Similar Attack<\/p>\n","protected":false},"author":2,"featured_media":182,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[35],"class_list":["post-181","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-infosec-digest","tag-wannacry"],"yoast_head":"\nWannaCry & the Blame Game - Blogs<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WannaCry & the Blame Game - Blogs\" \/>\n<meta property=\"og:description\" content=\"WannaCry and the Difficult Task of Preventing a Similar Attack\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/\" \/>\n<meta property=\"og:site_name\" content=\"Blogs\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TSFactoryLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-05-09T11:23:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-23T06:24:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"598\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chelsie Wyatt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:site\" content=\"@TSFactoryLLC\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chelsie Wyatt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/\",\"name\":\"WannaCry & the Blame Game - Blogs\",\"isPartOf\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg\",\"datePublished\":\"2017-05-09T11:23:56+00:00\",\"dateModified\":\"2021-09-23T06:24:36+00:00\",\"author\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg\",\"contentUrl\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg\",\"width\":800,\"height\":598},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WannaCry & the Blame Game\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/#website\",\"url\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/\",\"name\":\"Blogs\",\"description\":\"TSFactory\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f\",\"name\":\"Chelsie Wyatt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g\",\"caption\":\"Chelsie Wyatt\"},\"url\":\"https:\/\/www.tsfactory.com\/forums\/blogs\/author\/chelsie\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WannaCry & the Blame Game - Blogs","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/","og_locale":"en_US","og_type":"article","og_title":"WannaCry & the Blame Game - Blogs","og_description":"WannaCry and the Difficult Task of Preventing a Similar Attack","og_url":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/","og_site_name":"Blogs","article_publisher":"https:\/\/www.facebook.com\/TSFactoryLLC\/","article_published_time":"2017-05-09T11:23:56+00:00","article_modified_time":"2021-09-23T06:24:36+00:00","og_image":[{"width":800,"height":598,"url":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg","type":"image\/jpeg"}],"author":"Chelsie Wyatt","twitter_card":"summary_large_image","twitter_creator":"@TSFactoryLLC","twitter_site":"@TSFactoryLLC","twitter_misc":{"Written by":"Chelsie Wyatt","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/","url":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/","name":"WannaCry & the Blame Game - Blogs","isPartOf":{"@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage"},"image":{"@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg","datePublished":"2017-05-09T11:23:56+00:00","dateModified":"2021-09-23T06:24:36+00:00","author":{"@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f"},"breadcrumb":{"@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#primaryimage","url":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg","contentUrl":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-content\/uploads\/sites\/16\/2020\/06\/3-formatOriginal-e1632378264475.jpg","width":800,"height":598},{"@type":"BreadcrumbList","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/wannacry-the-blame-game\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tsfactory.com\/forums\/blogs\/"},{"@type":"ListItem","position":2,"name":"WannaCry & the Blame Game"}]},{"@type":"WebSite","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/#website","url":"https:\/\/www.tsfactory.com\/forums\/blogs\/","name":"Blogs","description":"TSFactory","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tsfactory.com\/forums\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/9d9908f0e12559297335ebe9b601c82f","name":"Chelsie Wyatt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tsfactory.com\/forums\/blogs\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/09ff3801fb7566acf715fe4e81a9bd942b923c236138a3ed8a8375f099e5d6d6?s=96&d=mm&r=g","caption":"Chelsie Wyatt"},"url":"https:\/\/www.tsfactory.com\/forums\/blogs\/author\/chelsie\/"}]}},"_links":{"self":[{"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/posts\/181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/comments?post=181"}],"version-history":[{"count":4,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/posts\/181\/revisions"}],"predecessor-version":[{"id":512,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/posts\/181\/revisions\/512"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/media\/182"}],"wp:attachment":[{"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/media?parent=181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/categories?post=181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tsfactory.com\/forums\/blogs\/wp-json\/wp\/v2\/tags?post=181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}