WannaCry cyberattack — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
0
occurrences
First Seen
November 4, 2025
Last Seen
November 4, 2025

WannaCry cyberattack is a threat campaign tracked by ThreatCluster. Linked intelligence reporting has not yet been indexed for this entity.

Overview

WannaCry ransomware campaign (WCry) is a wormable ransomware outbreak that emerged in May 2017 by exploiting the Windows SMB vulnerability MS17-010 (EternalBlue) to spread across networks, encrypting files and demanding Bitcoin payments. Its rapid global reach—affecting hundreds of thousands of systems in 150+ countries and impacting critical services such as healthcare—highlighted the importance of timely patching and robust backup and incident-response practices. The campaign is widely attributed to the Lazarus Group (North Korea) and emphasized the ongoing risk of unpatched Windows environments and worm-like malware propagation.

CVSS v3.1 Breakdown