Windows 10: Ransomware attacks reported on Windows machines internationally

Tweet



— Twitter API (@user) date[/quote]

 

Update: BBC is reporting that similar attacks are being reported in the UK, US, China, Russia, Spain, Italy, Vietnam, Taiwan today.

Heart surgery cancelled:
NHS cyber attack: 'My heart surgery was cancelled' - BBC News

===================================================
And there's a new nasty being distributed by email attachment too...

New Ransomware 'Jaff' Spotted; Malware Groups Pushing 5M Emails Per Hour To Circulate It - Slashdot

:)

 

RANSOMWARE ATACK

If you are referring to the recent WannaCry Ransomware Global attack....

WannaCry spreads by exploit in a weakness found in Microsoft Windows which was formerly exploited by the US National Security Agency (NSA) and targets unpatched systems. A group known as The Shadow Brokers claimed to have dumped hacking tools stolen from
NSA.

• WannaCrypt ransomware worm targets out-of-date systems
• Wana Decrypt0r Ransomware Using NSA Exploit Leaked by
  Shadow Brokers
• Say Hello to 'WannaCry'
• Ransomware infections reported worldwide
• WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm
• The worm that spreads WanaCrypt0r
• How did the WannaCry Ransomworm spread?

Microsoft Customer Guidance for WannaCrypt attacks

How to Protect yourself from the WannaCry or Wana Decryptor Ransomware

How to protect yourself from WannaCry ransomware

Microsoft releases WannaCrypt protection for out-of-support products...Windows XP, Windows 8, & Windows Server 2003

Quote from
Microsoft Customer Guidance for WannaCrypt attacks

"...we are taking the highly unusual step of providing a security update for all customers to protect Windows platforms that are in custom support only, including Windows XP, Windows 8, and Windows Server 2003. Customers running Windows 10 were not targeted
by the attack today.

If you are referring to something else, then more information will be needed.

 

Is Windows 10 still vulnerable to WannaCry Ransomware?

Social engineering is just one of various attack vectors.

Section :step2: in this topic explains the most
common methods Crypto malware (file encrypting ransomware) and other forms of ransomware is typically
delivered and spread.

• Anatomy of a ransomware attack
• Spotlight on Ransomware: Common infection methods
• Spotlight on Ransomware: How ransomware works

 

This still makes the news? IT guys know about it and they know how to easily prevent it, but since those infected organisations lack money and thus a proper IT support, this will keep happening, until they realize, how important is IT and that infected computers will result in a bigger profit loss, not to mention reputation.

 

Unfortunately some companies still think its cheaper to pay the ransom than set up proper IT and security support.

 

Well considering a patch for it was just released this week..


Err, March?

 

Ransomware can be prevented by other means, not by relying on the obsolete security software.

 

Oh sure it can, but it can still be a painful process in trying to keep ahead of every attack.

 

You setup and forget about it, it is really easy, it starts with a limited user account, group policies and etc.
Even if you would not update it for years, it would be safer than any other fully updated system with AVs.

 

And when people demand more rights than just read access? Who want full control of everything on their exposed machine? Who out rank you and you can't say no to?

 

Yea, many people complain, that they can no watch porn or play games on company computers, life sucks.

 

Like I said technically it can be easy to block, but office politics and such is always the painful part.

 

What are your thoughts on:

a. a white listing program (only 'approved' programs are allowed to be run- suitable for systems such as the NHS runs day to day that always run the same programs

b. Cryptoprevent
CryptoPrevent Malware Prevention Foolish IT

c. RansomFree by Cybereason
Ransomware Protection - RansomFree by Cybereason

(I have these last two installed)

 

How do these programs interact with antivirus software - any problems? Ransomfree must be quite uncommon since it is not recognised by Kaspersky Application Advisor.