Special thanks to Ladislav Zezula for working on this blog post and the decryptor tool!
Blog post and research by Pavel Sramek, David Jursa, and Lukas Rypacek
WannaCry, the worst ransomware outbreak in history, gained a lot of media attention, but WannaCry isn’t the only malware strain spreading on a massive scale. One of them is Adylkuzz, a cryptocurrency miner, that has been infecting PCs around the world, just like WannaCry.
While last Friday wasn’t Friday the 13th, it sure seemed like it. PCs around the world, including those belonging to hospitals and government agencies, were hit by the WannaCry (AKA WanaCrypt0r, or WCry) ransomware, causing chaos. Up until now we have seen more than 250,000 detections in 116 countries. About 15% of our more than 400 million users worldwide haven’t patched the MS17-010 vulnerability, which could have made them vulnerable to this attack, if they didn’t have Avast protecting them.