DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Wannacry

Wannacry

Inactive

wannacry

First seen: 2017-05-12 00:00:00.000000Total victims: 33

WannaCry ransomware is a cyber attack that spreads by exploiting vulnerabilities in the Windows operating system. At its peak in May 2017, WannaCry became a global threat. Cybercriminals used the ransomware to hold an organization's data hostage and extort money in the form of cryptocurrency. WannaCry spreads using EternalBlue, an exploit leaked from the National Security Agency (NSA). EternalBlue enables attackers to use a zero-day vulnerability to gain access to a system. It targets Windows computers that use a legacy version of the Server Message Block (SMB) protocol.

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 33 of 33

NameCountrySectorDate
State of Connecticut (12 State Agencies, including the Department of Administrative Services)USGovernment Facilities2018-02-23 00:00:00.000000
Becker CountyUSGovernment Facilities2017-08-16 00:00:00.000000
Murfreesboro PD and FDUSEmergency Services2017-07-01 00:00:00.000000
Honda Motor Co.—Critical Manufacturing2017-06-19 00:00:00.000000
TelkomZACommunication2017-05-16 00:00:00.000000
Rensselaer County LibraryUSEducation Facilities2017-05-15 00:00:00.000000
National Health Service (NHS) UKGBHealthcare and Public Health2017-05-12 00:00:00.000000
TelefonicaESCommunication2017-05-12 00:00:00.000000
RenaultFRCommercial Facilities2017-05-12 00:00:00.000000
FedExUSTransportation Systems2017-05-12 00:00:00.000000
NissanGBCommercial Facilities2017-05-12 00:00:00.000000
Russia Central BankRUFinancial2017-05-12 00:00:00.000000
Russian RailwaysRUTransportation Systems2017-05-12 00:00:00.000000
Russian Interior MinistryRUGovernment Facilities2017-05-12 00:00:00.000000
IberdrolaESEnergy2017-05-12 00:00:00.000000
Indian police in the state of Andhra PradeshINEmergency Services2017-05-12 00:00:00.000000
MegaFon—Communication2017-05-12 00:00:00.000000
Sberbank—Financial2017-05-12 00:00:00.000000
Thailand Digital BillboardTHCommercial Facilities2017-05-12 00:00:00.000000
Singapore shopping mallSGCommercial Facilities2017-05-12 00:00:00.000000
Chinese PoliceCNEmergency Services2017-05-12 00:00:00.000000
Bank Of ChinaCNFinancial2017-05-12 00:00:00.000000
China gas stationsCNEnergy2017-05-12 00:00:00.000000
Chinese traffic police, immigration and public security bureausCNGovernment Facilities2017-05-12 00:00:00.000000
SandvikSEInformation Technology2017-05-12 00:00:00.000000
PetrobrasBREnergy2017-05-12 00:00:00.000000
Brazil's Foreign MinistryBRGovernment Facilities2017-05-12 00:00:00.000000
Brazil's social security systemBRGovernment Facilities2017-05-12 00:00:00.000000
Portugal TelecomPTCommunication2017-05-12 00:00:00.000000
Deutsche Bahn (Germany Rail Network)DETransportation Systems2017-05-12 00:00:00.000000
MediaOnlineSGCommunication2017-05-12 00:00:00.000000
HitachiJPCritical Manufacturing2017-05-12 00:00:00.000000
Cook CountyUSGovernment Facilities2017-05-12 00:00:00.000000

Data from ransomware.live