peter košinár...part2 part 2 cau otcryÞt original file original file ransom32 all your personal...

34
Peter Košinár

Upload: others

Post on 30-Sep-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Peter Košinár

Page 3: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

$ 1,000,000,000Cézar vs. piráti20 50 talentov (~1600 kg) striebra

Page 4: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

AIDS Info Disk“DRM”

Page 5: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 6: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 7: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 8: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 9: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 10: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 11: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 12: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 13: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 14: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 15: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 16: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 17: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 18: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 19: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 20: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 21: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 22: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 23: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Stovka sem – stovka tam...

... Ja vás všetky pochytám !

Page 24: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Skadeže si, skade?

Page 25: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 26: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 27: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 28: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 29: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 30: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Win32/Filecoder.WannaCryptor aka WannaCry

Page 31: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Win32/Filecoder.WannaCryptor aka WannaCry

Page 32: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been
Page 33: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

A variant 15.2.2017 (Update #14942)

B variant 6.4.2017 (Update #15214)

C variant 12.5.2017 (Update #15403)

D variant 12.5.2017 (Update #15404)

WannaCryptor varianty

Page 34: Peter Košinár...PART2 PART 2 CAU OtCRYÞT ORIGINAL FILE ORIGINAL FILE Ransom32 ALL YOUR PERSONAL FILES HAS BEEN ENCRYPTED All your data (photos, documents, databases, etc) have been

Peter Košinár

ĎAKUJEM

Technical Fellow

[email protected]