SoylentNews

New SMB Worm 'EternalRocks' Uses Seven NSA Hacking Tools -- WannaCry Used Just Two

posted by cmn32480 on Sunday May 21 2017, @01:34PM   
from the ahhh-crap dept.

Fnord666 writes:

Researchers have detected a new worm that is spreading via SMB, but unlike the worm component of the WannaCry ransomware, this one is using seven NSA tools instead of two.

The worm's existence first came to light on Wednesday, after it infected the SMB honeypot of Miroslav Stampar, member of the Croatian Government CERT, and creator of the sqlmap tool used for detecting and exploiting SQL injection flaws.

The worm, which Stampar named EternalRocks based on worm executable properties found in one sample, works by using six SMB-centric NSA tools to infect a computer with SMB ports exposed online. These are ETERNALBLUE, ETERNALCHAMPION, ETERNALROMANCE, and ETERNALSYNERGY, which are SMB exploits used to compromise vulnerable computers, while SMBTOUCH and ARCHITOUCH are two NSA tools used for SMB reconnaissance operations.

Once the worm has obtained this initial foothold, it then uses another NSA tool, DOUBLEPULSAR, to propagate to new vulnerable machines.

Source: BleepingComputer

---

Original Submission

• Re:It isn't binary, but still really ugly Re:It isn't binary, but still really ugly (Score: 0) by Anonymous Coward on Monday May 22 2017, @04:26AM (3 children)

  by Anonymous Coward on Monday May 22 2017, @04:26AM (#513312)

  I am now preparing to sell my house and have not been paid in 1+ months because I'm trying to do payroll "correctly".

  I dont see how doing payroll correctly would prevent you from getting paid.

  Parent

• Re:It isn't binary, but still really ugly Re:It isn't binary, but still really ugly (Score: 2) by Lagg on Monday May 22 2017, @06:30AM (2 children)

  by Lagg (105) on Monday May 22 2017, @06:30AM (#513357) Homepage Journal

  Paperwork requirements, can't drive, the payroll company needing more information.

  I generally expect for things like this to happen and they always do. You've never had that happen? I budget for that shit it's happened to me so many times. It's one reason I tried doing the contractor thing in the first place. Clearly I was naive in expecting the burden to be /less/ as a private contractor.

  --
  http://lagg.me [lagg.me] 🗿

  Parent

  • Re:It isn't binary, but still really ugly Re:It isn't binary, but still really ugly (Score: 0) by Anonymous Coward on Monday May 22 2017, @04:38PM (1 child)

    by Anonymous Coward on Monday May 22 2017, @04:38PM (#513570)

    Sorry, I am still missing something. You are saying that you have so much paperwork to fill out after freelancing for a bit that it is basically a full time job for months?

    Parent

    • Re:It isn't binary, but still really ugly (Score: 2) by Lagg on Monday May 22 2017, @10:10PM

      by Lagg (105) on Monday May 22 2017, @10:10PM (#513803) Homepage Journal

      No, sorry. Guess this is an issue of me not liking to discuss financial stuff on the internet too much out of safe precaution and not wanting to speak out of turn due to lack of education on the subject. But no, it's mostly just a matter of waiting for bureaucracy. It's a very common occurrence for me to send stuff in, wait for a response that decided additional information was required, repeat. I did have a lot of paperwork to settle what I owed, but that's why I went to H&R Block (and hope I can afford it next year).

      The paperwork was indeed from freelancing for a bit though, unfortunately. I thought I could wing it. Turns out sending a check and 1040-V isn't even close to enough.

      --
      http://lagg.me [lagg.me] 🗿

      Parent