Cyberseer Blog

WannaCry Ransomware Stopped

Written by Elizabeth Gladen | 12:51 PM on May 15, 2017

Today, Cyberseer Analysts saw WannaCry ransomware in several customer environments, including a leading insurance group. Instead of causing disruption, it had been stopped at the early stages. Our Analysts discovered the suspicious domain activity whilst using the machine learning technology Darktrace.

Wana_Decrypt0r_screenshot.png 

Cyberseers managed services are powered by machine learning technology Darktrace, which uses AI algorithms to learn about our customers’ infrastructures. Our expert Analysts can then advise customers to respond to developing threats as they happen. Darktrace successfully identified the WannaCry malware activity due to the highly anomalous way in which the devices were behaving as they attempted to access and encrypt files, and laterally scan for other exposed devices.

The ease and speed with which the Cyberseer service is deployed have enabled us to work with global organisations and we are proud to have been able to help them defend against the largest ransomware attack in history.

If you are concerned about ransomware attacks or want to learn how our managed service can automatically detect and respond to in-progress cyber threats, please do a Proof of Concept with Cyberseer.

During a Proof of Concept, a self-configuring appliance is installed within your network free of charge for a period of 30 days, with full Analyst support allowing you to discover the benefits of Darktrace’s machine learning combined with Cyberseer's expertise, without any technical set-up or financial overhead.