Windows 10: Don’t run JavaScript email attachments: ​can carry potent ransomware

Don't run JavaScript email attachments: they can carry potent ransomware | PCWorld

:)

 

Is Windows 10 still vulnerable to WannaCry Ransomware?

If you have all the latest patches then you should be protected from WannaCry.

However, it doesn't mean you are safe from all current or future Ransomwares.

To help prevent Ransomware:

• Use a browser that you can block Ads, Flash, Java, and JavaScript
• Don't believe browser popups
• Don't believe phone calls saying they detect something wrong with your computer
• Don't click on links or open attachments in emails

No one thing is a total solution, but if you were to practice safe habits you'll go a long way to keeping yourself safe.

 

patch to stop ransomware

If you have all the latest patches then you should be protected from WannaCry.

However, it doesn't mean you are safe from all current or future Ransomwares.

To help prevent Ransomware:

• Use a browser that you can block Ads, Flash, Java, and JavaScript
• Don't believe browser popups
• Don't believe phone calls saying they detect something wrong with your computer
• Don't click on links or open attachments in emails

No one thing is a total solution, but if you were to practice safe habits you'll go a long way to keeping yourself safe.

 

If you don't recognize the source or the person who is sending you the attachment doesn't usually do so, don't open the attachment. Whether its a JavaScript attachment or an office program, any attachment really- I feel that should preface all of these articles.

 

^^ Excellent advice in both posts. ^^

I'll take it one step further to suggest: even if you DO know the sender, be careful of any attachment.

Both friends and work colleagues have been hacked from time to time over the years, and their emails "spoofed".

So, in addition to multiple layers of email security before any message (or its attachments) ever gets to my system, I typically scan EVERY attachment even if I know the sender and I "expect" the file.

Cheers,
MM

 

I myself don't like java script and only used it back in the old days

 

Thanks for the warnings.

 

No more Java for me since Windows 7...but good to know.

 

Hi, @galaxys:

"Java" and "Javascript" are not the same thing.*Wink

But your approach is a good one.
Few websites and (probably) fewer programs need JRE (aka "Java") these days.

The safest way to proceed is to fully uninstall all versions of Java from the Windows Control Panel, perhaps even using a tool, such as JavaRa (note: version 1.6 seems to work better than the current release build). Having outdated versions and remnants on the system can create security vulnerabilities.

If you end up needing to reinstall it, the ONLY safe place to get it is from the link here.
Be sure to opt-out (un-check/un-tick) any "freebies" that may be offered during the setup wizard, and it's vitally important to keep it fully updated with the current version (because of the previously mentioned security problems).
BTW, Merely disabling Java does not fully mitigate those vulnerabilities, even if you have the most current version.
So, you're right, if you don't need it, get rid of it.*Smile

As far as *javascript* is concerned, there are many browser extensions and security products to help secure your browsers and computer system from *javascript* vulnerabilities, which are different from *java* ("JRE").

Cheers,
MM

 

Thanks for the additional insight MM! I'll stay away from both those badboys! *Biggrin

 

A friend of mine got infected by Cryptolocker this way. *Sad

 

TL*BiggrinR - don't open emails you don't know or trust the look of!

 

Hi there

As above posters have said NEVER open email attachments from people you don't know --actually I'd go one better - just delete the emails straight away without even reading them.

As an aside --if you use Firefox it's easy to disable ALL scripts / or allow for specific websites.

For example if I'm using TOR for accessing (can't mention) some sites - then by disabling all scripts you won't get some of the porno / other links these sites can often throw up at you. Tor browser is a Firefox browser with some extra security features built in to it.

If you look at the tab at the top you'll see that scripts are globally disabled . It's the S in the circle at the top left with red to the left of the onion symbol.





The regular Firefox browser also has that option -- where you do need to run scripts you can enable it per site.

Cheers
jimbo