WannaCry Ransomware attacks, hits globally
The WannaCry ransomware is a malicious form of malware that encrypts data on any computer it infects. It was first discovered in May 2017 and has since spread across the globe, affecting hundreds of thousands of computers in more than 150 countries. It uses a vulnerability in Windows operating systems to spread quickly and encrypt files on the infected computers. It then demands a ransom for the encryption key to unlock the files.
What is WannaCry?
WannaCry is a terrifying type of Trojan Virus called ransomware targeting Microsoft Windows Operating System (those still running on exposed, unsupported operating systems were initially at risk such as Windows XP and Windows Server 2003). This type of virus holds the infected computer hostage and demands that the victim pay a ransom to gain access to the files on his or her computer.
How does it affect a computer?
There are various ways on how this virus is spread. Opening an attachment or links in phishing emails, downloading legitimate-looking programmes containing malwares can spread the virus. Machines running on outdated software and visiting a malicious website. Once the virus is inside a network, it can spread out and attack the other connected computers.
How do I know if I am a victim?
Once your computer or system is affected, the infected computer(s) display a message informing the system owner that their files has been encrypted, and payment is demanded (US$300 in bitcoin within three days or US$600 within seven days).
(Screenshot of the ransom note left on an infected system)
How can I protect my system?
- Ensure your systems are fully patched (particularly Microsoft Windows)
- Disseminate information about this virus with your staff and advise them not to click links in any suspicious looking email or open an attachment (If unsure, seek opinion of your IT Person).
- Ensure backups of critical systems have been performed and tested for recoverability.
- Migrate off Windows XP and Windows Server 2003 immediately
If system security concerns you, please call EHW Technology at 07 4944 0111 or email us at service@ehwtech.net.au and we will gladly assist you.
