{"id":2266,"date":"2021-03-19T21:18:33","date_gmt":"2021-03-20T02:18:33","guid":{"rendered":"https:\/\/truxgoservers.com\/blog\/?p=2266"},"modified":"2021-03-19T21:19:14","modified_gmt":"2021-03-20T02:19:14","slug":"eternalblue-the-exploit-used-by-wannacry","status":"publish","type":"post","link":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/","title":{"rendered":"EternalBlue was the exploit used by WannaCry"},"content":{"rendered":"\n<p>WannaCry sparked one of the largest cyberattacks the world has ever seen. And while the threat itself is not causing further damage around the world, the exploit that triggered the outbreak, known as EternalBlue, is still threatening unprotected and unpatched systems. And as ESET telemetry data shows.<\/p>\n\n\n\n<p>This is an exploit allegedly developed by the NSA. It was leaked by the hacker group Shadow Brokers on April 14, 2017, exploiting a vulnerability in the implementation of Microsoft&#8217;s Server Message Block protocol. This vulnerability, denoted as CVE-2017-0144, is due to the fact that version 1 of the SMB server accepts specific packages from remote attackers in various versions of Microsoft Windows, allowing them to execute code on the computer in question.<\/p>\n\n\n\n<p>The Windows security update of March 14, 2017 solved the problem through security patch MS17-010, for all versions of Windows that were maintained by the company at that time: Windows Vista, Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012, and Windows Server 2016 but&#8230;. For various reasons, many Windows users had not installed MS17-010 when, two months later, on May 12, 2017, it occurred the WannaCry attack using the EternalBlue vulnerability.<\/p>\n\n\n\n<p>It is important to note that the infiltration method used by EternalBlue is not successful on ESET protected devices, as one of the multiple layers of protection ESET&#8217;s Network Attack Protection module &#8211; blocks this threat at the point of entry. This can be compared to someone at 2 a.m. knock on the door gently trying to find out if someone is still awake. As such activity is more often carried out by someone with malicious intent, the entrance is sealed to keep the intruder out.<\/p>\n\n\n\n<p>EternalBlue allowed large-scale cyberattacks to be carried out and not only WannaCry, but also promoted other destructive attacks such as Diskcoder.C also known as NotPetya, BadRabbit ransomware, Fancy Bear, etc.<\/p>\n\n\n\n<p>This shows the importance of seeing and following cybersecurity tips that, as well as we will know how to keep your equipment updated, would be one of the critical and key points to improve our cybersecurity.<\/p>\n\n\n\n<p>See also:<br><a href=\"https:\/\/truxgoservers.com\/blog\/wannacry-one-of-the-biggest-cyberattacks-in-history\/\">WannaCry, one of the biggest cyberattacks in history<\/a><br><a href=\"https:\/\/truxgoservers.com\/blog\/freakout-a-botnet-targeting-linux\/\">FreakOut \u2013 A Botnet targeting Linux<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>WannaCry sparked one of the largest cyberattacks the world has ever seen. And while the threat itself is not causing further damage around the world, the exploit that triggered the outbreak, known as EternalBlue, is still threatening unprotected and unpatched systems. And as ESET telemetry data shows. This is an exploit allegedly developed by the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2267,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[36],"class_list":["post-2266","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>EternalBlue was the exploit used by WannaCry - Truxgo Server Blog<\/title>\n<meta name=\"description\" content=\"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EternalBlue was the exploit used by WannaCry - Truxgo Server Blog\" \/>\n<meta property=\"og:description\" content=\"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..\" \/>\n<meta property=\"og:url\" content=\"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/\" \/>\n<meta property=\"og:site_name\" content=\"Truxgo Server Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-20T02:18:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-03-20T02:19:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"480\" \/>\n\t<meta property=\"og:image:height\" content=\"271\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Truxgo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Truxgo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/\"},\"author\":{\"name\":\"Truxgo\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#\\\/schema\\\/person\\\/8b409c26449db6aa09724b45331e333e\"},\"headline\":\"EternalBlue was the exploit used by WannaCry\",\"datePublished\":\"2021-03-20T02:18:33+00:00\",\"dateModified\":\"2021-03-20T02:19:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/\"},\"wordCount\":362,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/exploit.jpg\",\"keywords\":[\"Cybersecurity\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/\",\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/\",\"name\":\"EternalBlue was the exploit used by WannaCry - Truxgo Server Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/exploit.jpg\",\"datePublished\":\"2021-03-20T02:18:33+00:00\",\"dateModified\":\"2021-03-20T02:19:14+00:00\",\"description\":\"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#primaryimage\",\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/exploit.jpg\",\"contentUrl\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/exploit.jpg\",\"width\":480,\"height\":271},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/eternalblue-the-exploit-used-by-wannacry\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EternalBlue was the exploit used by WannaCry\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/\",\"name\":\"Truxgo Server Blog\",\"description\":\"Cloud Server and Hosting Tutorials.\",\"publisher\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#organization\",\"name\":\"Truxgo Server Blog\",\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/cropped-truxgo-logo-blanco.png\",\"contentUrl\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/cropped-truxgo-logo-blanco.png\",\"width\":1250,\"height\":278,\"caption\":\"Truxgo Server Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/#\\\/schema\\\/person\\\/8b409c26449db6aa09724b45331e333e\",\"name\":\"Truxgo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g\",\"caption\":\"Truxgo\"},\"sameAs\":[\"https:\\\/\\\/truxgoservers.com\\\/blog\"],\"url\":\"https:\\\/\\\/truxgoservers.com\\\/blog\\\/author\\\/truxgo\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EternalBlue was the exploit used by WannaCry - Truxgo Server Blog","description":"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/","og_locale":"es_MX","og_type":"article","og_title":"EternalBlue was the exploit used by WannaCry - Truxgo Server Blog","og_description":"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..","og_url":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/","og_site_name":"Truxgo Server Blog","article_published_time":"2021-03-20T02:18:33+00:00","article_modified_time":"2021-03-20T02:19:14+00:00","og_image":[{"width":480,"height":271,"url":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg","type":"image\/jpeg"}],"author":"Truxgo","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Truxgo","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#article","isPartOf":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/"},"author":{"name":"Truxgo","@id":"https:\/\/truxgoservers.com\/blog\/#\/schema\/person\/8b409c26449db6aa09724b45331e333e"},"headline":"EternalBlue was the exploit used by WannaCry","datePublished":"2021-03-20T02:18:33+00:00","dateModified":"2021-03-20T02:19:14+00:00","mainEntityOfPage":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/"},"wordCount":362,"commentCount":1,"publisher":{"@id":"https:\/\/truxgoservers.com\/blog\/#organization"},"image":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#primaryimage"},"thumbnailUrl":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg","keywords":["Cybersecurity"],"articleSection":["Cybersecurity"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/","url":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/","name":"EternalBlue was the exploit used by WannaCry - Truxgo Server Blog","isPartOf":{"@id":"https:\/\/truxgoservers.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#primaryimage"},"image":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#primaryimage"},"thumbnailUrl":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg","datePublished":"2021-03-20T02:18:33+00:00","dateModified":"2021-03-20T02:19:14+00:00","description":"As we well know, exploits can be a very big problem for all Internet users and one of the most serious we will see today called EternalBlue..","breadcrumb":{"@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#primaryimage","url":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg","contentUrl":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2021\/03\/exploit.jpg","width":480,"height":271},{"@type":"BreadcrumbList","@id":"https:\/\/truxgoservers.com\/blog\/eternalblue-the-exploit-used-by-wannacry\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/truxgoservers.com\/blog\/"},{"@type":"ListItem","position":2,"name":"EternalBlue was the exploit used by WannaCry"}]},{"@type":"WebSite","@id":"https:\/\/truxgoservers.com\/blog\/#website","url":"https:\/\/truxgoservers.com\/blog\/","name":"Truxgo Server Blog","description":"Cloud Server and Hosting Tutorials.","publisher":{"@id":"https:\/\/truxgoservers.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/truxgoservers.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/truxgoservers.com\/blog\/#organization","name":"Truxgo Server Blog","url":"https:\/\/truxgoservers.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/truxgoservers.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2020\/08\/cropped-truxgo-logo-blanco.png","contentUrl":"https:\/\/truxgoservers.com\/blog\/wp-content\/uploads\/2020\/08\/cropped-truxgo-logo-blanco.png","width":1250,"height":278,"caption":"Truxgo Server Blog"},"image":{"@id":"https:\/\/truxgoservers.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/truxgoservers.com\/blog\/#\/schema\/person\/8b409c26449db6aa09724b45331e333e","name":"Truxgo","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/52691a61c58e68677ed4860007c1bb03b14eabe7350747ab3fad3e17825b4b96?s=96&d=mm&r=g","caption":"Truxgo"},"sameAs":["https:\/\/truxgoservers.com\/blog"],"url":"https:\/\/truxgoservers.com\/blog\/author\/truxgo\/"}]}},"_links":{"self":[{"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/posts\/2266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/comments?post=2266"}],"version-history":[{"count":3,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/posts\/2266\/revisions"}],"predecessor-version":[{"id":2282,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/posts\/2266\/revisions\/2282"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/media\/2267"}],"wp:attachment":[{"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/media?parent=2266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/categories?post=2266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/truxgoservers.com\/blog\/wp-json\/wp\/v2\/tags?post=2266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}