Here is the source of all these articles with actual technical info on the attack:
https://www.guardicore.com/labs/please-read-me-opportunistic...
https://www.guardicore.com/labs/please-read-me-opportunistic...
> That site’s history with HN [1] isn’t exactly confidence inspiring.
Unfortunately, guardicore.com's "reputation" [2] isn't much better!
Of all the articles on this topic linked in this thread, the one from ThreatPost [3] is probably the "most reputable" as far as I'm concerned.
--
[0]: https://news.ycombinator.com/item?id=25524954
[1]: https://news.ycombinator.com/from?site=srnnews.com
[2]: https://news.ycombinator.com/from?site=guardicore.com
[3]: https://threatpost.com/please_read_me-ransomware-mysql-serve...