Cybereason RansomFree detects and blocks WannaCry using behavioral based detection (video link, details in comment)

Hi, we’re Cybereason, an EDR security company.

RansomFree is a (truly) free ransomware protection solution, that’s derived from our enterprise solution.

https://ransomfree.cybereason.com/

We’ve just completed testing vs WannaCry, happy to report our software detects and blocks the ransomware. In our tests, however, we’ve seen a few files get encrypted on the desktop before WannaCry was stopped. Our honeypot files are designed to be captured first but it’s not always perfect, especially with unknown, sophisticated attacks, so YMMV.

Regardless, this is an unmodified version of RansomFree, able to stop the WannaCry ransomware using the same techniques it uses to stop other ransomware- meaning, next time an unknown agent pops up, there’s a good chance we’ll catch it.

Anyone running the current version of RansomFree can run a test to confirm it does indeed stop the attack, we’ve not modified the files in any way. We encourage testing, please let us know if it works.

At our core, we hope to help those who are most vulnerable defend against cyber criminals and other low-lives. You may instinctively want to downvote, I understand. Realize that we are just trying to be a part of the solution, and help people out.

Thank you all.

/r/netsec Thread Link - youtu.be