...The new attack, named Adylkuzz, is linked to WannaCry, and according to Godier, “uses the hacking tools recently disclosed by the NSA and which have since been fixed by Microsoft in a more stealthy manner and for a different purpose. ” A blog post by Proofpoint suggests that the symptoms of infection and the attack include loss of access to shared Windows resources and degradation of PC and server performance.

Several large organizations reported network issues this morning that were originally attributed to the WannaCry campaign. However, because of the lack of ransom notices, we now believe that these problems might be associated with Adylkuzz activity. However, it should be noted that the Adylkuzz campaign significantly predates the WannaCry attack, beginning at least on May 2 and possibly as early as April 24. This attack is ongoing and, while less flashy than WannaCry, is nonetheless quite large and potentially quite disruptive.

This latest news comes right as hacking group the Shadow Brokers hinted at more exploits to come. Two major campaigns have already employed the newer attack tools and vulnerability, and Adylkuzz has already netted attackers thousands of dollars...

Read more: New reports suggest a larger scale cyber attack is underway, silently mines infected computers for virtual currency | On MSFT

Posted By: Brink
17 May 2017