Loading story…
The WannaCry ransomware outbreak spread into Hungary as the malware rapidly infected roughly 57,000 systems worldwide and disrupted major organizations across Europe and beyond. Reports identified victims including Telefónica, Gas Natural, Iberdrola, FedEx, Portugal Telecom, and Russia’s MegaFon, while multiple UK hospitals were forced to stop accepting ambulances after systems were affected. The malware encrypted files and left compromised computers effectively unusable, making it one of the most disruptive ransomware incidents seen at the time.
Hungary was listed among affected countries on live infection tracking, and local reporting said the attack had reached Telenor Hungary. Telenor confirmed the incident had affected the company but said customers would not experience any noticeable service disruption. The reporting indicated that the campaign’s impact was not limited to isolated enterprises, but had become part of a fast-moving international cyberattack that was simultaneously hitting telecommunications, energy, logistics, and healthcare organizations.
TTPs, infrastructure, and targeting history in one profile.
2 events from the most recent confirmed update back to the earliest known activity.
Reports and live monitoring indicated that WannaCry had reached Hungary. Bleeping Computer reported Telenor Hungary was impacted, and Telenor confirmed the attack had reached it while saying customers would not notice any service disruption.
By Friday evening, the WannaCry ransomware campaign had rapidly spread worldwide, with reports citing roughly 57,000 victims. The malware encrypted files and rendered affected computers unusable, disrupting major organizations including Telefónica, Gas Natural, Iberdrola, FedEx, Portugal Telecom, MegaFon, and multiple UK hospitals.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
2 references tracked. Mallory keeps watching after this page renders.
magyarnemzet.hu
Open sourceweb.archive.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The **WannaCry** ransomware worm disrupted healthcare and businesses worldwide by exploiting the Windows SMBv1 flaw tracked as `CVE-2017-0145` and patched in `MS17-010`. In the U.K., the outbreak hit at least 16 National Health Service hospitals initially and later was reported to have affected **81 NHS trusts** in England and nearly **600 GP surgeries**, forcing ambulance diversions and widespread service disruption. The malware also struck organizations including **Telefonica** and spread rapidly across roughly **150 countries**, infecting more than **300,000** computers, with major impact on older, unpatched Windows systems such as Windows 7, Windows Server 2008, and earlier versions. Microsoft said the malware combined worm-like propagation with file encryption, checking a kill-switch domain before execution, creating the `mssecsvc2.0` service to spread, appending the `.WNCRY` extension to encrypted files, and deleting shadow copies to complicate recovery. Reporting on the incident said the campaign used **EternalBlue**-style exploit code and was linked to the leaked NSA-associated SMB exploit chain, while later U.K. government statements said they were highly confident **North Korea** was responsible. The NHS said there was no early evidence patient data had been accessed, but subsequent reviews found basic cyber hygiene failures, especially delayed patching and weak follow-through on critical alerts, contributed to the scale of the disruption; Microsoft responded by urging organizations to install `MS17-010`, disable `SMBv1`, and block inbound SMB traffic on port 445, and it issued emergency updates for unsupported systems including Windows XP.
Aug 15, 2026The **WannaCry** (`WanaCrypt0r 2.0`) ransomware outbreak encrypted tens of thousands of computers across roughly 99 to 100 countries, disrupting organizations including UK NHS hospitals, Telefónica, and FedEx. The malware demanded a **$300** ransom and spread by exploiting a Windows vulnerability tied to offensive tools allegedly used by the NSA and later leaked by the Shadow Brokers. Microsoft had already released fixes for supported Windows versions, but many victims had not applied them, and the scale of the incident prompted the company to take the unusual step of issuing emergency patches for legacy platforms including **Windows XP**, **Windows 8**, and **Windows Server 2003**. Investigators said the attackers had collected only about **$20,000** in bitcoin in the early stages, with payments traced to a small number of monitored wallets, suggesting limited financial returns despite the global disruption. UK officials said they believed the incident was criminal rather than a state attack, while researchers noted that bitcoin's pseudonymous nature could still allow law enforcement to trace funds through exchanges. The outbreak later began to slow after a researcher discovered a **kill switch**, but the incident highlighted the operational risk posed by delayed patching, exposed legacy systems, and the public release of weaponized exploits.
Jun 29, 2026
Ransomware attacks have repeatedly crippled hospital operations, forcing providers to divert care, lose access to critical systems, and in some cases pay attackers to recover. At Hollywood Presbyterian Medical Center in Los Angeles, malware encrypted files and disrupted the hospital's computer network, prompting executives to pay about **$17,000 in bitcoin** after attackers reportedly reduced an initial demand of **$3.4 million**. The outage interfered with administrative functions and highlighted how cyberattacks on healthcare can create direct patient-safety risks. The threat later scaled across national healthcare systems. The **WannaCry** outbreak spread to nearly 100 countries and severely impacted the UK's **NHS**, knocking hospitals and clinics offline and disrupting appointments and treatment. In Romania, a ransomware attack on a healthcare IT platform left multiple hospitals offline, underscoring how attacks on shared digital infrastructure can cascade across many facilities at once and paralyze care delivery well beyond a single organization.
Jun 29, 2026