Google Researcher Recovered Strong Connection Between North Korea And WannaCry Attack

 No Idea About WannaCry Attacks ?

Neel Mehta ,

 Google security researcher , found evidence that suggests the WannaCry ransomware, that infected 300,000 machines in 150 countries over the weekend  for cyber attacks against South Korean organizations.

• WannaCry ransomware attack which is meant by critical Windows SMB exploit

Neel discovered that the code found in the WannaCry malware .It was identical to the code used in an early 2015 version of Cantopee, a malicious backdoor developed by Lazarus Group,  believed to be linked with state-sponsored hacking group to North Korean government.

Security researchers from Kaspersky Lab, Intezer, Symantec, and Comae Technologies immediately followed the tip from Neel and confirmed a strong link between WannaCry and other malware families, including Lazarus, Joanap, and Brambul, which suggests WannaCry was written or modified by the same author.

Is the WannaCry Attack Over? Or Not ?

Definitely Not , Its Just the beginning

Security researchers have discovered some new variants of this ransomware, which could not be stopped by the kill switch, so you are advised to make sure you have applied the patch for SMB vulnerability and disabled SMBv1 protocol to keep your Windows computers safe from WannaCry and other similar attacks.

The WannaCry attackers declared ransom fees between $300 to $600 to free the hijacked data. The three bitcoin wallets tied to #WannaCry ransomware have received 225 payments totaling 35.98003282 BTC (approx. $60,000) from ransomware victims.

What is WannaCry and How to Escape ??

Read Here