Re: Ransomware cyber-attack

From: Cédric Poottaren <cedric_at_jcplaboratory.org>
Date: Mon, 15 May 2017 15:43:42 +0000

Hello


CertMU is on today's JT.

Have a lot.


Regards,

Cédric Poottaren
Software Developer
http://jcplaboratory.org
________________________________
From: mauritius-internet-users-bounce_at_lists.elandnews.com <mauritius-internet-users-bounce_at_lists.elandnews.com> on behalf of S Moonesamy <sm+mu_at_elandsys.com>
Sent: Monday, May 15, 2017 5:53:07 PM
To: Ish Sookun
Cc: mauritius-internet-users_at_lists.elandnews.com
Subject: Re: Ransomware cyber-attack

Hi Ish,

Did you receive any reply from CERT-MU?

I made a mistake when I initially commented about the DNS
change. I'll skip the obvious mistake in a news article. According
to the code
at
https://blog.didierstevens.com/2017/05/13/quickpost-wcry-killswitch-check-is-not-proxy-aware/
there is a test to determine whether a connection can be opened, and
if that condition is true, the host is not infected.

Regards,
S. Moonesamy
Received on Mon May 15 2017 - 15:44:02 PST