ctrlINT What the industry said about every indicator, with the quote

commands[.]inDomain

Reported by 1 independent source · first reported by Group-IB · last reported

Last reported 9 years ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “…ump to get network/local admin passwords (similar to mimicatz x86, x64), and after that it infects other computers with PsExec or WMI commands[.]In short, there is no need for all computers to be vulnerable to EternalBlue.”

    Group-IBVendor
    Petya starts with Ukraine and then goes global

Indicators reported together

named in the same reports

Also named with it: CVE-2017-0199, CVE-2017-0144

Thanks — we review every report.

Report a wrong value
What is wrong with commands[.]in here?
No account needed. We do not store your IP address.