WannaCry ransomware is a cyber attack that spreads by exploiting vulnerabilities in the Windows operating system. At its peak in May 2017, WannaCry became a global threat. Cybercriminals used the ransomware to hold an organization's data hostage and extort money in the form of cryptocurrency. WannaCry spreads using EternalBlue, an exploit leaked from the National Security Agency (NSA). EternalBlue enables attackers to use a zero-day vulnerability to gain access to a system. It targets Windows computers that use a legacy version of the Server Message Block (SMB) protocol.
33Victims
May 11, 2017First Discovered
Feb 22, 2018Last Discovered
2992Days Inactive
100%Infostealer
0/1Sites Online
Top Countries
US6
CN4
RU3
BR3
GB2
ES2
SG2
ZA1
FR1
PT1
Top Sectors
Public Sector10
Manufacturing5
Telecommunication5
Transportation/Logistics3
Financial Services3
Energy3
Consumer Services2
Education1
Healthcare1
Known Locations (1)
none.
Victims (33)
State of Connecticut (12 State Agencies, including the Department of Administrative Services)
USPublic Sector
Discovered: Feb 22, 2018 · Attack est.: Feb 22, 2018
Becker County
USPublic Sector
Discovered: Aug 15, 2017 · Attack est.: Aug 15, 2017
Murfreesboro PD and FD
USPublic Sector
Discovered: Jun 30, 2017 · Attack est.: Jun 30, 2017
Honda Motor Co.
Manufacturing
Discovered: Jun 18, 2017 · Attack est.: Jun 18, 2017
Telkom
ZATelecommunication
Discovered: May 15, 2017 · Attack est.: May 15, 2017
Rensselaer County Library
USEducation
Discovered: May 14, 2017 · Attack est.: May 14, 2017
Renault
FRManufacturing
Discovered: May 11, 2017 · Attack est.: May 11, 2017
FedEx
USTransportation/Logistics
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Russian Railways
RUTransportation/Logistics
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Nissan
GBManufacturing
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Telefonica
ESTelecommunication
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Russia Central Bank
RUFinancial Services
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Brazil's Foreign Ministry
BRPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Russian Interior Ministry
RUPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Singapore shopping mall
SGConsumer Services
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Cook County
USPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Bank Of China
CNFinancial Services
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Chinese traffic police, immigration and public security bureaus
CNPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Brazil's social security system
BRPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
China gas stations
CNEnergy
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Petrobras
BREnergy
Discovered: May 11, 2017 · Attack est.: May 11, 2017
MegaFon
Telecommunication
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Iberdrola
ESEnergy
Discovered: May 11, 2017 · Attack est.: May 11, 2017
MediaOnline
SGTelecommunication
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Sberbank
Financial Services
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Portugal Telecom
PTTelecommunication
Discovered: May 11, 2017 · Attack est.: May 11, 2017
National Health Service (NHS) UK
GBHealthcare
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Indian police in the state of Andhra Pradesh
INPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Thailand Digital Billboard
THConsumer Services
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Sandvik
SEManufacturing
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Hitachi
JPManufacturing
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Deutsche Bahn (Germany Rail Network)
DETransportation/Logistics
Discovered: May 11, 2017 · Attack est.: May 11, 2017
Chinese Police
CNPublic Sector
Discovered: May 11, 2017 · Attack est.: May 11, 2017