WannaCry USES kill switch
WannaCry checked a specific URL and stopped running when the URL was active, implementing a kill switch.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“This is called a kill switch”
Technique
technique:kill_switch
Execution-control mechanism that halted WannaCry when a specified domain was reachable.
Execution-control mechanism that halted WannaCry when a specified domain was reachable.
“This is called a kill switch.”
“WannaCry would check if that URL exists and if it did, it would stop running immediately.”
WannaCry USES kill switch
WannaCry checked a specific URL and stopped running when the URL was active, implementing a kill switch.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“This is called a kill switch”