Re: Ransomware cyber-attack

From: S Moonesamy <sm+mu_at_elandsys.com>
Date: Mon, 15 May 2017 06:53:07 -0700

Hi Ish,

Did you receive any reply from CERT-MU?

I made a mistake when I initially commented about the DNS
change. I'll skip the obvious mistake in a news article. According
to the code
at
https://blog.didierstevens.com/2017/05/13/quickpost-wcry-killswitch-check-is-not-proxy-aware/
there is a test to determine whether a connection can be opened, and
if that condition is true, the host is not infected.

Regards,
S. Moonesamy
Received on Mon May 15 2017 - 13:55:30 PST