lauren@vortex.com
Date: Sat, 13 May 2017 09:08:37 -0700
Lauren's Blog https://lauren.vortex.com/2017/05/13/warning-antivirus-sites-may-be-helping-to-spread-the-current-global-malware-ransomware-wannacry-attack
It has been reported that a researcher discovered that spread of the current worldwide ransomware attack can be halted after he registered the domain:
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
and built a sinkhole website that the malware could check. Reportedly
the malware does not continue spreading if it can reach this site.
HOWEVER, various antivirus websites/services are now reportedly adding
that domain to their "bad domain" lists! If sites infected with this
malware are unable to reach that domain due to their firewalls
incorporating rules from antivirus sites that include a block for that
domain, the malware will likely continue spreading across their
machines. Your systems MUST be able to access the domain above if this
malware blocking trigger is to be effective, according to the current
reports that I'm receiving!