Bad Rabbit Ransomware Uses Leaked 'EternalRomance' NSA Exploit to Spread

🗓️ 26 Oct 2017 23:57:00Reported by Mohit KumarType

New Bad Rabbit Ransomware uses EternalRomance NSA exploit to spread, targets Russia and Ukrain

Reporter	Title	Published	Views	Family All 93
Gitee	Exploit for CVE-2017-0143	6 Sep 202500:38	–	gitee
zdt	Microsoft Windows - Uncredentialed SMB RCE (MS17-010) Exploit	17 Apr 201700:00	–	zdt
zdt	Microsoft Windows - SrvOs2FeaToNt SMB Remote Code Execution (MS17-010) Exploit	10 May 201700:00	–	zdt
zdt	Microsoft Windows MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption Exploit	17 May 201700:00	–	zdt
zdt	DOUBLEPULSAR - Payload Execution and Neutralization Exploit	4 Oct 201900:00	–	zdt
zdt	SMB DOUBLEPULSAR Remote Code Execution Exploit	4 Feb 202000:00	–	zdt
Tenable Nessus	SMB Server DOUBLEPULSAR Backdoor / Implant Detection (EternalRocks)	18 Apr 201700:00	–	nessus
Tenable Nessus	Ransomware Traffic Detected (WannaCry)	15 May 201700:00	–	nessus
Tenable Nessus	MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)	20 Mar 201700:00	–	nessus
Tenable Nessus	MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya)	15 Mar 201700:00	–	nessus