WannaCry Ransomware: Hackers responsible for stolen NSA tool warn of another leak, blame North Korea for ransomware attack

By Adamya Sharma | Published on 17 May 2017

The Shadow Brokers have warned of another data dump in June, which may leak exploits and tools for web browsers, routers, handsets, Windows 10 and more.

WannaCry Ransomware: Hackers responsible for stolen NSA tool warn of another leak, blame North Korea for ransomware attack

Make 2021 your best year with IBM Developer

Make 2021 the year where you truly shine, grow, build & Code. Get support and motivation from the IBM Developer community. #IBMDeveloper #CodePatterns

Click here to know more


Over the past few days, one of the biggest ever cyber extortion schemes - WannaCry, claimed more that 300,000 computers across 150 countries in the world. The ransomware blocked crucial access to data in banks, hospitals, universities, public transport services, telecom operators, shipping companies and more, all around the world.

Hackers who deployed the WannaCry ransomware used an NSA exploit which was leaked in April by another hacking group called Shadow Brokers. The leaked NSA tool named ‘EternalBlue’, helped hackers add the worm feature to WannaCry, enabling the malware to replicate itself across vulnerable machines in both government and private organisations around the globe.

On Tuesday, Shadow Brokers released an open letter announcing that the group is planning yet another data dump of NSA tools in June. In the said letter, the hacking group stated, “TheShadowBrokers is taking pride in picking adversary equal to or better than selves, a worthy opponent.” They further added, “The oracle is telling theshadowbrokers North Korea is being responsible for the global cyber attack Wanna Cry.”

While The Shadow Brokers say it is planning no dumps in May, as the members are busy eating “popcorn and watching ‘Your Fired’ and WannaCry,” the group has warned of another data dump in June. “In June, TheShadowBrokers is announcing ‘TheShadowBrokers Data Dump of the Month’ service. TheShadowBrokers is launching new monthly subscription model. Is being like wine of month club. Each month peoples can be paying membership fee, then getting members only data dump each month. What members doing with data after is up to members.”

This time around, the dump could include exploits and tools for web browsers, routers and handsets. In addition, the leak could include - select items from newer Ops Disks, including newer exploits for Windows 10; compromised network data from more SWIFT providers and Central banks; and compromised network data from Russian, Chinese, Iranian, or North Korean nukes and missile programs.

Further, The Shadow Brokers said that they tried to sell the stolen NSA tools in an auction, before leaking the same. They also want to send a strong message to an ‘Equation Group’, another hacking group linked to the NSA. The open letter says, “Despite what scumbag Microsoft Lawyer is wanting the peoples to be believing Microsoft is being BFF with the equation group. Microsoft and the equation group is having very very large enterprise contracts millions or billions of USD each year. The Equation Group is having spies inside Microsoft and other U.S. technology companies.”

The Shadow Brokers further allege that this Equation Group is paying US tech companies “Not to patch” vulnerabilities until users discover the same.

Also Read: Ethical hacker explains how WannaCry malware wormed its way through computers and that India is NOT among worst affected

Adamya Sharma

Managing editor, Digit.in - News Junkie, Movie Buff, Tech Whizz!

Digit caters to the largest community of tech buyers, users and enthusiasts in India. The all new Digit in continues the legacy of Thinkdigit.com as one of the largest portals in India committed to technology users and buyers. Digit is also one of the most trusted names when it comes to technology reviews and buying advice and is home to the Digit Test Lab, India's most proficient center for testing and reviewing technology products.

We are about leadership-the 9.9 kind! Building a leading media company out of India.And,grooming new leaders for this promising industry.

DMCA.com Protection Status