Replies

The problem isn’t Windows; it’s failure to update, and clinging to, older versions that are less secure. Windows 10 has automatic updates of an anti-virus app that blocks ransomeware.

Well, that is kind of right. It is a failure to patch. This is a vulnerability in SMB - server message block. It is explained in more detail in MS17-010.

Shadow Brokers released the NSA tools almost a month ago. So, affected businesses had plenty of time to patch. They chose not to, for whatever reason. As for AV 'blocking' the ransomware, I would not rely on that. Generally speaking, in terms of new malware, AV does NOT catch the dropper. And is often behind in catching the payload as well. I'm not saying don't have AV - definitely DO. But thinking that because you have it, you are good to go is a big mistake.

"... Windows 10 has automatic updates of an anti-virus app that blocks ransomware.

Well, yes it is Microsoft's fault. Overwhelmingly, but not entirely. I'll give you that.

Ironic that you mention the Windows 10 built-in module ("Windows Defender / MSE") that allegedly blocks ransomware in this of all days, since just a few days ago they had to patch a zero day exploit in Windows Defender affecting basically every operating system they support. The exploit was discovered by Google engineers, namely, competitors of Microsoft. That's just nuts.

Here's the story:

ZD Net: Microsoft releases emergency patch for 'crazy bad' Windows zero-day bug

Here's the NIST.gov background on it:

NIST.gov: CVE-2017-0290 -- Microsoft Malware Protection Engine Remote Code Execution Vulnerability

The exploit Google uncovered is that a security hole allows specially-crafted Javascript to easily trick the Windows Defender / MSE scanning engine to actually run the script it's scanning. It works because Windows Defender malware scanner has some kind of Javascript interpreter built into the framework. Who in their right mind at Microsoft decided a kernel-level, unsandboxed Javascript interpreter baked into their malware scanner was a brilliant idea? It actually has the proven potential to delivers worms and viruses to the entire installed user base.

And just today, the world's largest ransomware cyberjacking in history affecting only Microsoft products was caused by an exploit discovered months ago by the NSA.

Here's the most hilariously miserable part of the story: The private individual who stopped the global replication of the WannaCry cyber attack did it by spending $10.69 out of his own pocket.

But hey, Microsoft blames their users for not regularly updating their systems with security patches to plug exploits that even Microsoft can't identify without outside help from their market competitors, the US Federal government, and some guy in the UK named Darien who spent just over ten bucks of his own money. Wow.

I think Congress ought to investigate Microsoft at this point. This is several levels of magnitude worse than anything Volkswagen did with their diesel smog control devices. I hope you agree.

"... Hectoring people on the OS that is run on their system is like blaming the gun for someone’s death. It is who pulled the trigger that is to blame."

Eddie, read the explanation above and understand that the gun manufacturer in this case, Microsoft, marketed firearms that have no internal or external safety and when dropped are likely to not only discharge but also spin around on the ground like a 'Chinese Ground Bloom Flower' holiday firework firing bullets wildly until the magazine is empty. Might even reload itself and keep on firing. Moreover, the system the gun manufacturer put in place to assist you from dropping their gun actually increases the chance that you drop the gun.

Today was a really bad day for Microsoft. All over the planet. The hits just kept on coming.

“Windows 10 has automatic updates of an anti-virus app that blocks ransomeware.”

I had a share that was left open to anyone on the network. It held useless information. It got ransomed. I blew it away and re-created it.