Twitter:

@malwrhunterteam @malwareunicorn . So does Kwampirs

— Andre M. DiMino (@sempersecurus) May 15, 2017

http://ifttt.com/missing_link?1494952064 from Twitter https://twitter.com/sempersecurus

Twitter:

I heard ya'll like overlaps– another Lazarus sample with same WannaCrypt Overlap: 409c6a19705ccbd3185d5d0656c7811d @ 0x4018C0 from Oct 2014 pic.twitter.com/bLCuIT87vQ

— J. A. Guerrero-Saade (@juanandres_gs) May 15, 2017

https://t.co/ssTkErJdG8 from Twitter https://twitter.com/juanandres_gs

Twitter:

In fact, Cisco says WannaCry has no way to check bitcoins paid. Clicking "check payment" gives random fake response https://t.co/UiaJ688DUO

— Andy Greenberg (@a_greenberg) May 15, 2017

https://t.co/UiaJ688DUO from Twitter https://twitter.com/a_greenberg

Twitter:

WanaCryptor File Encryption https://t.co/VeLuCWh3mQ

— Nicolas Krassas (@Dinosn) May 15, 2017

https://t.co/VeLuCWh3mQ from Twitter https://twitter.com/Dinosn

Twitter:

A 'kill switch' is slowing the spread of #WannaCry ransomware https://t.co/QgVVQufs5o via @pcworld

— Betty C. Jung (@bettycjung) May 13, 2017

https://t.co/QgVVQufs5o from Twitter https://twitter.com/bettycjung

Twitter:

wikileaks: Russia hardest hit by NSA turbo-charged ransomware #WannaCry https://t.co/K9VDjZ1EdR

— L'Afrique Cachée (@africachee) May 13, 2017

https://t.co/K9VDjZ1EdR from Twitter https://twitter.com/africachee

Twitter:

#WannaCry crosses 100k mark! Spreads all over the world. https://t.co/us4MO3kthg

— Umar Khan (@CreativityLogic) May 13, 2017

https://t.co/us4MO3kthg from Twitter https://twitter.com/CreativityLogic

Twitter:

This is actual footage of #WannaCry #ms17-010 spreading through University of Milano-Bicocca pic.twitter.com/GuiDe4GdSl

— Rickey Gevers (@UID_) May 12, 2017

https://t.co/GuiDe4GdSl from Twitter https://twitter.com/UID_

Twitter:

Love this idea - Infosec cons, can we make this a thing? https://t.co/xC7btOAQQe

— Jayme (@highmeh) May 12, 2017

https://t.co/xC7btOAQQe from Twitter https://twitter.com/highmeh

Twitter:

#WannaCry resources password:WNcry@2ol7 pic.twitter.com/OOcawrC8WR

— xors (@xorsthings) May 12, 2017

https://t.co/OOcawrC8WR from Twitter https://twitter.com/xorsthings

Twitter:

LATEST: 100,000+ attacks of #WannaCry ramsomware detected in 24 hours #WanaCrypt0r #WCry https://t.co/xCaUzzFJF8 pic.twitter.com/xIAgbkBX5i
…

— rick (@rickrick888) May 13, 2017

https://t.co/xCaUzzFJF8 from Twitter https://twitter.com/rickrick888

Twitter:

#wannacry have made 17k NZD so far based on the wallet addresses stated in https://t.co/TNlyKJBarz - should buy u a few smokes in jail team

— bogan (@bogan) May 13, 2017

https://t.co/TNlyKJBarz from Twitter https://twitter.com/bogan

Twitter:

More great analysis of #WannaCry malware by Talos https://t.co/S74elk4772

— 🏴 Lauri Love 🏴 (@laurilove) May 13, 2017

https://t.co/S74elk4772 from Twitter https://twitter.com/laurilove

Twitter:

After the #Sbahn in Frankfurt also Bhf Neustadt affected by the Ransomware outbreak. #WannaCry pic.twitter.com/JgVwi5Khz6

— Rickey Gevers (@UID_) May 12, 2017

https://t.co/JgVwi5Khz6 from Twitter https://twitter.com/UID_

Twitter:

Attack distribution by country. #WannaCry #ShadowBrokers find more on @Securelist : https://t.co/RWW3y4wPLb pic.twitter.com/dWOPyX2dIc

— Ido Naor (@IdoNaor1) May 12, 2017

https://t.co/RWW3y4wPLb from Twitter https://twitter.com/IdoNaor1

Twitter:

A2
#IDTheftChat #LayerUp http://pic.twitter.com/9D46mGyYwP

— Michael Kaiser (@MKaiserNCSA) May 4, 2017

https://t.co/9D46mGyYwP from Twitter https://twitter.com/MKaiserNCSA