I deployed MOVE MP at a costumer network, and recently I discovered something rather interesting, and suspicious. The SVM Manager is trying to contact a server via ntp port. The server is listed as a tor network. My firewall bloqued the request since this is a WannaCry indicator. You can see a print bellow:
This network has no internet access and this is the only server with this behaviour. I am using SVM Manager OVF version 18.104.22.168.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.