UPSC Prelims 2018 Q58: Science & Technology – Computer & Information Technology
- (a) Exoplanets
- (b) Cryptocurrency
- (c) Cyber attacks
- (d) Mini satellites
Answer: (c) Cyber attacks
Explanation
WannaCry, Petya, EternalBlue - Context
All three terms relate to cyber attacks and vulnerabilities:
| Term | What it is | Year |
|---|---|---|
| WannaCry | A ransomware cryptoworm that infected over 200,000 computers in 150+ countries by encrypting files and demanding Bitcoin ransom. | May 2017 |
| Petya / NotPetya | Another ransomware family; the NotPetya variant caused massive damage globally in June 2017, particularly hitting Ukraine and multinational firms (Maersk, Merck). | 2016/2017 |
| EternalBlue | A Windows SMB vulnerability exploit developed by the NSA and leaked by the Shadow Brokers hacking group in April 2017 - used as the initial infection vector by both WannaCry and NotPetya. | Leaked April 2017 |
Checking the options:
| Option | Correct? |
|---|---|
| (a) Exoplanets | NO |
| (b) Cryptocurrency | NO (though ransoms were in Bitcoin, the terms themselves are attacks, not currencies) |
| (c) Cyber attacks | YES |
| (d) Mini satellites | NO |
Answer: (c) Cyber attacks.
Why each option is right or wrong
- (a) Incorrect. Exoplanets are planets outside our solar system - unrelated to these malware names.
- (b) Incorrect. While ransoms were demanded in Bitcoin, the terms refer to malware/exploits, not cryptocurrencies.
- (c) CORRECT. All three (WannaCry, Petya, EternalBlue) are components of major 2017 global cyber attacks.
- (d) Incorrect. Mini satellites are a space technology category - not related to these malware names.
Key point
2017 cyber crisis: EternalBlue (NSA-developed SMB exploit, leaked by Shadow Brokers) enabled WannaCry (May 2017) and NotPetya (June 2017) - the two worst ransomware outbreaks ever, hitting NHS UK, Maersk, Merck and many others.
Remember
WannaCry (May 2017) and Petya/NotPetya (June 2017) were massive ransomware attacks that hit hundreds of thousands of computers worldwide, including the UK's NHS and companies like Maersk and Merck. Both used EternalBlue - a Windows SMB vulnerability exploit originally developed by the NSA and leaked by the Shadow Brokers group. Together they represent the worst global cyber attacks in recent memory.
Common mistakes
- Assuming ransomware ransoms mean the terms themselves are cryptocurrencies - the payment demand doesn't make the malware a currency.
- Confusing WannaCry (ransomware, encrypts) with EternalBlue (the exploit tool that enabled infection).
- Missing the geopolitical dimension - EternalBlue was NSA-developed and its leak by Shadow Brokers armed criminals with state-grade tools.
Exam tip
Cyber attack anatomy: Vulnerability (like SMBv1 flaw) + Exploit tool (like EternalBlue) + Payload (like WannaCry ransomware) + Delivery (worm-spread, phishing). If any of these terms appear, think cyber attacks.
Sources
- CERT-In (India) - Advisories on WannaCry and NotPetya (2017)
- US CISA - Advisories on EternalBlue and Related Threats