EternalBlue
EternalBlue
("igisina")
olemus
eksploit, mis põhineb Windowsi ühel turvaaugul,
lekkis välja NSAst ja on rakendatud kahjurprogrammide
WannaCry ja Petya loomiseks
=
an exploit that targets the SMBv01 protocol used by Windows computers
ülevaateid
https://en.wikipedia.org/wiki/EternalBlue
https://www.sentinelone.com/blog/eternalblue-nsa-developed-exploit-just-wont-die/
http://www.cs.toronto.edu/~arnold/427/18s/427_18S/indepth/EternalBlue/EternalBlue_report.pdf
https://www.cisecurity.org/wp-content/uploads/2019/01/Security-Primer-EternalBlue.pdf
https://research.checkpoint.com/2017/eternalblue-everything-know/
https://www.fireeye.com/blog/threat-research/2017/05/smb-exploited-wannacry-use-of-eternalblue.html
https://www.sepaforcorporates.com/payments-news-2/overview-shadow-brokers-swift-nsa-leaks/
tõrje
https://www.keepitsafe.com/blog/post/eternalblue-whats-going-on-and-how-to-protect-your-data/
https://heimdalsecurity.com/blog/windows-update-guide-patch-smb-exploit/
https://www.ncua.gov/newsroom/ncua-report/2017/protect-your-systems-against-eternalblue-vulnerability
https://www.helpnetsecurity.com/2017/06/30/eternal-blues-eternalblue-vulnerability-scanner/