X

Watch WannaCry attack worldwide in real time

MalwareTech, whose analyst briefly blunted the WannaCry outbreak, has a real-time tracker of the ransomware's attack in progress.

Lori Grunin Senior Editor / Advice
I've been reviewing hardware and software, devising testing methodology and handed out buying advice for what seems like forever; I'm currently absorbed by computers and gaming hardware, but previously spent many years concentrating on cameras. I've also volunteered with a cat rescue for over 15 years doing adoptions, designing marketing materials, managing volunteers and, of course, photographing cats.
Expertise Photography, PCs and laptops, gaming and gaming accessories
Lori Grunin
Watch this: Why the WannaCry cyberattack is so bad, and so avoidable
screen-shot-2017-05-15-at-10-10-34-am.png

MalwareTech's WCrypt botnet tracker maps the attack.

Malware Tech screenshot by Lori Grunin/CNET

It's not a new site, but at the moment it's probably one of the most mesmerizing on the internet.

MalwareTech, whose security analyst on Friday briefly slowed the worldwide attack of the WannaCry ransomware, has created a botnet tracker that shows the locations of unique IP addresses -- a computer's address on the internet -- getting hit in real time. There are also maps of the attack in increments, such five minutes or one hour, and graphics of the new and total attacks.

The site may be getting overloaded periodically, so if the real-time map isn't working, wait a few minutes and try again.

You can see the attack spreading westward as businesses go online for the day; they spread the ransomware the fastest because it uses a worm to propagate itself through networks.

Over the weekend, the ransomware's creators plugged the hole that the MalwareTech analyst found.

Separately, another site shows hourly Bitcoin ransom payments over the course of the outbreak, though it's just estimated data. If the site is correct, the payments have dropped significantly since Friday.