peter košinár · 2020-03-10 · part2 part 2 cau otcryÞt original file original file . ransom32...

34
Peter Košinár

Upload: others

Post on 12-Jul-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Peter Košinár

Page 3: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

$ 1,000,000,000Cézar vs. piráti20 50 talentov (~1600 kg) striebra

Page 4: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

AIDS Info Disk“DRM”

Page 5: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 6: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 7: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 8: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 9: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 10: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 11: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 12: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 13: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 14: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 15: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 16: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 17: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 18: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 19: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 20: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 21: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 22: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 23: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Stovka sem – stovka tam...

... Ja vás všetky pochytám !

Page 24: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Skadeže si, skade?

Page 25: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 26: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 27: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 28: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 29: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 30: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Win32/Filecoder.WannaCryptor aka WannaCry

Page 31: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Win32/Filecoder.WannaCryptor aka WannaCry

Page 32: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,
Page 33: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

A variant 15.2.2017 (Update #14942)

B variant 6.4.2017 (Update #15214)

C variant 12.5.2017 (Update #15403)

D variant 12.5.2017 (Update #15404)

WannaCryptor varianty

Page 34: Peter Košinár · 2020-03-10 · PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE . Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases,

Peter Košinár

ĎAKUJEM

Technical Fellow

[email protected]