Notorious 2017 ransomware attack that spread globally through a Windows vulnerability, notably affecting the NHS.
WannaCry was a ransomware attack in May 2017 that infected over 200,000 computers across 150 countries within days. It exploited EternalBlue, a Windows SMB vulnerability leaked from the NSA, to spread automatically without user interaction. The NHS was severely impacted, with cancelled appointments and diverted ambulances. WannaCry demonstrated how rapidly worm-like ransomware could spread and the catastrophic consequences of unpatched systems. A kill switch discovered by a security researcher eventually slowed its spread.
Why It Matters
The DSC Perspective:
WannaCry remains a powerful example of ransomware impact and the importance of patching. It's often referenced when explaining ransomware risk to leadership. Systems affected were unpatched despite fixes being available for months.