The people behind WannaCry's security exploits are promising more leaks

Think of it as a sinister loot box.
 By 
Yi Shu Ng
 on 
The people behind WannaCry's security exploits are promising more leaks
Credit: AFP/Getty Images

Imagine a loot box -- but for security exploits.

The people behind the security exploits that powered WannaCry are threatening more leaks.

The Shadow Brokers -- a group that claimed last Saturday (May 13) that they have stolen hacking tools from the National Security Agency (NSA) -- said in a blog post that it would set up a "monthly subscription model" for security exploits.

"Is being like wine of month club," they wrote in broken English. "Each month peoples [sic] can be paying membership fee, then getting members only data dump each month."

Tools that belonged to the NSA and were found in WannaCry, the ransomware that paralysed much of the world last weekend, were originally released by the Shadow Brokers in April.

The Shadow Brokers said that members can expect to get compromised banking data from SWIFT, a global banking network, newer exploits for Windows 10, and compromised network data from "Russian, Chinese, Iranian or North Korean" nuclear and missile programs.

Revealing data from SWIFT and nuclear programs in Russia, China, Iran or North Korea could disrupt ongoing NSA operations, according to Nicholas Weaver, a staff cybersecurity researcher writing on LawFare.

He added that most of the exploits The Shadow Brokers May release are still patchable, though exploits to Android handsets might remain "devastating."

"Financial spying by the NSA is probably the most important and least liberty-infringing bulk-style program possible -- and I doubt anyone outside the targeted countries would have a problem with the NSA spying on foreign WMD and missile programs," Weaver wrote.

This isn't the first time the group has attempted to sell its exploits and cyber-weaponry.

The Shadow Brokers had originally tried to sell the stolen tools in an auction, but backed down after receiving no bidders.

"TheShadowBrokers is not being interested in stealing grandmothers' retirement money," the group said, adding that the theft has "always" been about the Shadow Brokers versus the Equation Group, a hacking group linked to the NSA.

The group had also previously put exploits up for sale on ZeroNet for up to 250 bitcoins a piece ($454,815 today) in January, Motherboard reported.

Topics Cybersecurity

Mashable Image
Yi Shu Ng

I am an intern with Mashable Asia, focusing on viral news, lifestyle news and feature news in the region.

Mashable Potato

Recommended For You
iPhone 18 leaks about Dynamic Island redesign may have been the result of mistranslation
Dynamic Island

iPhone Fold leaks, rumors, and renders: Everything we know
a hypothetical render of the iPhone Fold on a stylized mashable background

Updating your security mindset: Keep your data private and your devices secure
By PCMag
Cyber Security

Samsung Galaxy S26 leaks shed light on colors, prices
Samsung logo on white wall

Leaks suggest Nothing Phone 4a is coming very soon
Nothing Phone 3 from behind

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.

Google launches Gemma 4, a new open-source model: How to try it
Google Gemma

NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!