When it comes to online currency,China lulz just might outvalue Bitcoin.
A unknown group of hackers is working behind the scenes to restart the ransomware WannaCry, and one security expert believes the culprits this time around aren't who you think.
And neither is their motivation.
SEE ALSO: It won't be easy for WannaCry hackers to get their cashContrary to what you might expect, it appears not to be the initial group responsible for WannaCry now working to startle the ransomware monster awake from its slumber. Rather, we may have some internet randos to thank.
Why? The leading theory, proposed by security researcher Marcus Hutchins, suggests it's all about shits and giggles.
WannaCry rushed onto the international scene on May 12, infecting and encrypting hundreds of thousands of computer systems running unpatched Windows operating systems. The ransomware demanded that victims pay around $300 in the cryptocurrency Bitcoin to their attackers if they ever wanted to see their files again.
"Yeah, it's most likely scriptkiddies doing it for lulz."
Some paid up, but computers stayed encrypted.
And while the damage was bad — England's National Health Service was hit particularly hard — it could have been a lot worse. The ransomware -- which utilized a stolen NSA exploit called EternalBlue -- stopped spreading when Hutchins registered a mysterious domain he discovered in the malware code and sinkholed it.
Hutchins explained the process on his blog, noting that "a sinkhole is a server designed to capture malicious traffic and prevent control of infected computers by the criminals who infected them."
Hutchins means business. Credit: AP/REX/Shutterstock The ransomware, it seems, was designed to contact Hutchins' domain before it spread to the next victim. Hutchins' registration of that domain created a kind of kill switch — effectively telling WannaCry to stop spreading.
As long as that domain, and one other discovered and sinkholed by a different researcher, remain up and active the ransomware won't spread. Which brings us back to our lulz-pirates.
Hutchins has observed an intentional distributed denial of service attack aimed at his domain with the apparent goal of knocking it offline. Wiredreports that the traffic appears to be coming courtesy of the Mirai botnet — the same botnet, comprised of IoT devices like wireless security cameras, that brought down parts of the internet in the fall of 2016.
This Tweet is currently unavailable. It might be loading or has been removed.
Why would anyone do this? Could the initial WannaCry developers simply want more computers infected with the hope of making more money? Probably not.
As Hutchins confirmed via Twitter direct message, the initial attackers can't appear to even keep up with the volume of decryption requests they've already received.
"[The] decryption system is stupid and completely unscalable," he observed.
In other words, infecting more computers won't exactly translate to more Bitcoin in their wallets. That leaves another possibility: someone just looking to mess with people.
"Yeah, it's most likely scriptkiddies doing it for lulz," Hutchins further speculated — using a term that refers to relatively low-skilled hackers.
So there you have it. If someone manages to knock Hutchins' sinkhole offline, allowing WannaCry to spread further in the process, you'll likely have some random prankster with a messed up sense of humor to thank.
But don't stress about it too much. "The DDoS is unlikely to be successful," reassures Hutchins.
Phew. Now if only Hutchins could solve our other internet security problems.
Topics Cybersecurity
The Mismeasure of Media
NYT Strands hints, answers for February 27
Wordle today: The answer and hints for February 28, 2025
Best Beats deal: Save $70 on Powerbeats Pro
'The Last of Us' Season 2, episode 4: Why Ellie sings 'Take on Me'
Best Google deal: Save $150 on the Google Pixel 9
Best Apple Watch deal: Save $70 on Apple Watch Series 10
Save $250 on Shark's 3
How to Settle Down with Dystopia
Best Switch deal: Get Pokémon Scarlet and Violet for a discount at Woot
Hurricane Laura's impact lingered with nightmarish mosquito swarms
Pakistan vs. Bangladesh 2025 livestream: Watch ICC Champions Trophy for free
NYT Connections Sports Edition hints and answers for February 28: Tips to solve Connections #158
iRobot Roomba Q011 deal: $149.99 at Amazon
I'm a college professor. My advice to young people who feel hooked on tech
Stuff Your Kindle Day: How to get free dystopian fantasy books on Feb. 28
Best gaming laptop deal: Save $300 on ASUS ROG Strix G16
Best headphones deal: Save $116 on Sennheiser Momentum 4
The Anatomy of Liberal Melancholy
Stuff Your Kindle Day: How to get free coming
False report claims Colin Kaepernick would end his protest in NFL'Buffy' star Charisma Carpenter details mistreatment from Joss WhedonUber riders might be able to hail selfAmazon's Ring Video Doorbell Pro 2 apparently leaked on Best BuyA Facebook smartwatch? It could be coming for your health data in 2022'Little Nightmares II' is messy, but also scary and charming: ReviewA Facebook smartwatch? It could be coming for your health data in 2022What Facebook, Twitter, Snap, Google think of iOS14 privacy updatesAmazon's ‘Map of Tiny Perfect Things’ is a sweet teen time loop movieChrissy Teigen and John Legend adopted a new dog and boy is it cuteUse words to drive exploding cats from your lawn in The Oatmeal's mobile gameMike Pence put the NFL controversy back in the headlines—right where Donald Trump wants itAmazon's Ring Video Doorbell Pro 2 apparently leaked on Best BuyA Facebook smartwatch? It could be coming for your health data in 2022Woman Instagrams her catcallers to prove an important point'Little Nightmares II' is messy, but also scary and charming: ReviewHeartbreaking 'New Yorker' cover honors victims of Las Vegas shootingDonald Trump claims he came up with the term 'fake news'Bus driver gets so into his jam, he gets up and dances while speeding down the roadTwitter bans Project Veritas after posting video of Facebook employee's home Dress shoes for children are the only shoes I want to wear It looks like 'Star Wars: Battlefront II' will ditch the Season Pass Disney shows off Star Wars Land, and just shut up and take our money 'Star Wars: Battlefront II' reveals what happened after Endor this November This Starbucks barista will draw an awesome caricature of you on your cup 'Star Wars Rebels' to end with 'darker' Season 4 CIA director mocks Kellyanne Conway for ridiculous microwave comments LOL Melissa McCarthy just destroyed Sean Spicer again on 'SNL' Microsoft: We've already patched the Shadow Brokers Windows exploits Star Wars fans shock and delight Mark Hamill with wedding proposal Remote watch parties are the best thing to ever happen to introverts Jimmy Fallon debuts bashful Jared Kushner impression on 'SNL' Fox set footage of that gigantic bomb to country music 'Egg Sheeran' will be the perfect addition to your Easter baskets Facebook cracks down on bogus 'likes' and zombie accounts in battle against fake news See how the store of the future will work $43 million was found in a Nigerian apartment and everyone made the same joke Yes, old people totally understand emoji (except maybe that eggplant one) Summer movie preview: What to watch if you just want to see the best of the best 16 times 'Green Wing' was the funniest British comedy of all time