PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Unsolved Cyber Mysteries Volume 2: The WANK Worm

bugcrowd.com | blog | #nasa | #worm | #malware-history | #cyber-mysteries | #wank-worm | #hacktivism
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

This episode of Unsolved Cyber Mysteries covers the 1989 WANK Worm, an early act of hacktivism that hit NASA days before the Galileo Probe launch, displaying protest messages on infected systems.
Published
Collected

Related coverage

blog · bugcrowd.com
Unsolved Cyber Mysteries Volume 3: Code Red
A deep dive into Code Red, the 2001 worm that exploited Microsoft IIS and infected hundreds of thousands of servers, exploring competing origin theories that remain unresolved to this day.
blog · bugcrowd.com
Hacking the stars: My experience with NASA’s VDP
Portuguese pentester Miguel Alves recounts finding a vulnerability on NASA's VDP via Bugcrowd, sharing how fundamentals and methodology helped him land his first P1 and pursue live hacking events.
blog · bugcrowd.com
Bug Bytes for December 21: Nation State Attacks, Cybersecurity Legislation and Bug Bounty News
This Bug Bytes covers the Cloud Hopper campaign tied to China's Ministry of State Security, the NASA employee data breach, and automated phishing of Google, Yahoo and Protonmail accounts.
blog · hackerone.com
Shai-Hulud 2.0: What Security Leaders Need to Do Now
Shai-Hulud 2.0 is a self-replicating npm worm stealing secrets from dev and CI/CD environments; with 1,000+ packages and 27,000+ repos hit, rotate credentials and disable lifecycle scripts.
blog · aikido.dev
tensorlake NPM package compromised with Shai Hulud worm
# tensorlake NPM package compromised with Shai Hulud worm Written by Oliver Smith Published on: Oct 8, 2026 On 8 October 2026 a threat actor published a compromised version of tensorlake to npm....
blog · aikido.dev
Shai-Hulud Rises From the Dead after 111 days
The Shai-Hulud npm worm payload behind May's @AntV attack resurfaced after 111 days: four new packages on September 7 carried the identical hash, despite npm's new publish-time malware scanning.
Back