STREAMING NOW: Watch Now

Microsoft and Facebook take action against WannaCry group

Facebook and Microsoft have teamed up to crack down on the hacking group believed to be behind a ransomware attack th...

Posted: Dec 20, 2017 11:42 AM
Updated: Dec 20, 2017 11:42 AM

Facebook and Microsoft have teamed up to crack down on the hacking group believed to be behind a ransomware attack that spread around the world in May.

Last week, the two companies collaborated with other unnamed members of the security community to take action against the group, the companies and a White House official said on Tuesday. The group, known as ZINC or Lazarus, has been tied to ongoing cyber threats, including the WannaCry ransomware attack that targeted hospitals, businesses and banks in the spring.

The announcement came the same day the U.S. government officially accused North Korea of being behind the WannaCry attack. In a Wall Street Journal op-ed, Homeland Security Adviser Tom Bossert said "after careful investigation" the U.S. was publicly placing blame on North Korea for the attack. Bossert said it was "based on evidence" but did not offer more details.

The governments of the United Kingdom, Australia, Canada, New Zealand and Japan also announced that they believed North Korea was behind the attack.

Though Facebook and Microsoft did not directly attribute the attack to North Korea, Microsoft president Brad Smith in a blog post said the company was "pleased to see these governments making this strong statement of attribution."

"If the rising tide of nation-state attacks on civilians is to be stopped, governments must be prepared to call out the countries that launch them. Today's announcement represents an important step in government and private sector action to make the internet safer," he wrote.

Related: White House officially blames North Korea for massive 'WannaCry' cyberattack

Microsoft said it cleaned its customers' infected computers and took down accounts that Lazarus was using to "pursue cyberattacks." It also beefed-up Windows security to prevent the malware from infecting computers again.

Facebook also deleted profiles operated by the group. Hackers used fake social media profiles to pose as other people and connect with potential targets, Facebook said in a post. It also reached out to people who had inadvertently connected to the suspicious accounts. It gave them advice on how to improve their security.

Facebook said while it was targeting the same group, its actions weren't focused on WannaCry. The companies did approach the U.S. government recently to inform it of their findings.

"Facebook has a long-standing commitment to security, and we continue to invest in efforts to protect people from cyber threats and keep our platform safe," said a Facebook spokesperson in a statement. "We will continue to work closely with companies to investigate and counteract these types of threats to our collective security."

The malware locks down infected computers and demanded a ransom from the user. If the amount was not paid, their data would be deleted. The May attack impacted vital computer systems in 150 countries, including the Britain's health system.

The spread of the virus was halted by British malware researcher Marcus Hutchins, who discovered a kill-switch for the attack. He is currently awaiting trial in the U.S. on charges of allegedly conspiring to distribute unrelated malware.

Indiana Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 33068

Reported Deaths: 2068
CountyConfirmedDeaths
Marion9524558
Lake3494175
Cass15897
Allen141966
St. Joseph122134
Hendricks114268
Hamilton113292
Elkhart110128
Johnson1092106
Madison58459
Porter50522
Bartholomew49034
Clark47941
LaPorte42022
Tippecanoe3823
Howard37824
Delaware37636
Jackson3721
Shelby36822
Hancock32727
Floyd31739
Boone30535
Morgan27724
Vanderburgh2592
Montgomery23417
White2308
Decatur22431
Clinton2221
Noble20421
Grant19721
Dubois1903
Harrison18921
Henry16910
Greene16824
Monroe16512
Warrick16528
Dearborn16521
Vigo1538
Lawrence15223
Miami1401
Putnam1357
Jennings1294
Orange12422
Scott1203
Ripley1106
Franklin1098
Kosciusko1011
Carroll933
Daviess8416
Steuben812
Marshall801
Newton7610
Wayne756
Fayette747
Wabash742
LaGrange682
Jasper661
Washington511
Jay490
Fulton471
Clay461
Rush452
Randolph453
Jefferson431
Pulaski410
Whitley383
Owen351
Sullivan341
DeKalb331
Brown331
Starke323
Perry280
Wells270
Benton260
Huntington262
Knox250
Tipton241
Crawford230
Blackford222
Parke190
Spencer191
Switzerland190
Fountain182
Posey160
Gibson142
Adams131
Ohio130
Warren121
Vermillion100
Martin90
Union80
Pike60
Unassigned0161
West Lafayette
Scattered Clouds
78° wxIcon
Hi: 79° Lo: 56°
Feels Like: 79°
Kokomo
Scattered Clouds
75° wxIcon
Hi: 75° Lo: 53°
Feels Like: 75°
Rensselaer
Scattered Clouds
75° wxIcon
Hi: 76° Lo: 52°
Feels Like: 75°
Fowler
Scattered Clouds
75° wxIcon
Hi: 75° Lo: 54°
Feels Like: 75°
Williamsport
Scattered Clouds
79° wxIcon
Hi: 78° Lo: 56°
Feels Like: 79°
Crawfordsville
Scattered Clouds
73° wxIcon
Hi: 77° Lo: 55°
Feels Like: 73°
Frankfort
Scattered Clouds
78° wxIcon
Hi: 76° Lo: 54°
Feels Like: 79°
Delphi
Scattered Clouds
77° wxIcon
Hi: 77° Lo: 54°
Feels Like: 79°
Monticello
Scattered Clouds
77° wxIcon
Hi: 78° Lo: 53°
Feels Like: 79°
Logansport
Scattered Clouds
75° wxIcon
Hi: 75° Lo: 52°
Feels Like: 75°
Cooler, less humid weather ahead by the weekend.
WLFI Radar
WLFI Temps
WLFI Planner

COVID-19 Important links and resources

As the spread of COVID-19, or as it's more commonly known as the coronavirus continues, this page will serve as your one-stop for the resources you need to stay informed and to keep you and your family safe. CLICK HERE

Closings related to the prevention of the COVID-19 can be found on our Closings page.

Community Events