logo

WannaCry ransomware. What you need to know.

ID: b6bded41-967b-5ee0-a319-c7c9cfe94bd7

STIX ID: report--b6bded41-967b-5ee0-a319-c7c9cfe94bd7

Feed Name: Zscaler Security Research Blog

Threat Score
90/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

On 12 May 2017 the WannaCry ransomware campaign exploited the SMBv1 vulnerability (MS17-010) to rapidly spread across corporate networks worldwide via TCP ports 139 and 445, causing widespread disruption. The report outlines Microsoft emergency patches and mitigations (apply MS17-010, block SMBv1 and ports 139/445), and lists Zscaler detection signatures, in-line AV names, and sandbox/SSL inspection measures to detect and block the malware and post-infection activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.