Windows 10: Useful WannaCry Information

I thought with WannaCry making the news at the moment we should have a thread with useful videos, articles, news and links in one place so members can link to it and users can refer to it.

I'll start off with a collection of useful videos.

[youtube]RGCj3PhMPlI[/youtube]

[youtube]OLxKftAuv5M[/youtube]

[youtube]LJAU899R4P8[/youtube]

:)

 

Does Wannacry virus work on all drives

WannaCry is a worm that spreads by exploit in a weakness found in Microsoft Windows
which was formerly exploited by the US National Security Agency (NSA) and targets unpatched systems. The WannaCry worm speads via an operation targeting vulnerable SMB ports and then uses the NSA-leaked exploit to infect a network.

• WannaCrypt ransomware worm targets out-of-date systems
• Wana Decrypt0r Ransomware Using NSA Exploit Leaked by
  Shadow Brokers
• Say Hello to 'WannaCry'
• Ransomware infections reported worldwide
• WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm
• The worm that spreads WanaCrypt0r
• How did the WannaCry Ransomworm spread?

According to
Cisco Talos, WannaCry encrypts everything in terms of connected or networked devices..."it checks for disk drives, including network shares and removable storage devices mapped to a letter, such as 'C:/', 'D:/' etc."

Microsoft Customer Guidance for WannaCrypt attacks

How to Protect yourself from the WannaCry or Wana Decryptor Ransomware

How to protect yourself from WannaCry ransomware

 

RANSOMWARE ATACK

If you are referring to the recent WannaCry Ransomware Global attack....

WannaCry spreads by exploit in a weakness found in Microsoft Windows which was formerly exploited by the US National Security Agency (NSA) and targets unpatched systems. A group known as The Shadow Brokers claimed to have dumped hacking tools stolen from
NSA.

• WannaCrypt ransomware worm targets out-of-date systems
• Wana Decrypt0r Ransomware Using NSA Exploit Leaked by
  Shadow Brokers
• Say Hello to 'WannaCry'
• Ransomware infections reported worldwide
• WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm
• The worm that spreads WanaCrypt0r
• How did the WannaCry Ransomworm spread?

Microsoft Customer Guidance for WannaCrypt attacks

How to Protect yourself from the WannaCry or Wana Decryptor Ransomware

How to protect yourself from WannaCry ransomware

Microsoft releases WannaCrypt protection for out-of-support products...Windows XP, Windows 8, & Windows Server 2003

Quote from
Microsoft Customer Guidance for WannaCrypt attacks

"...we are taking the highly unusual step of providing a security update for all customers to protect Windows platforms that are in custom support only, including Windows XP, Windows 8, and Windows Server 2003. Customers running Windows 10 were not targeted
by the attack today.

If you are referring to something else, then more information will be needed.

 

There are only 2 useful imperatives :

Keep up-to-date with Patches and AV definitions thru Windows Update

and

Make sure that you have everything you value backed up in order to recover and restore your systems.

None of these videos is particularly useful with regard to the above.

 

Very true. The exploit that Wannacry uses has already been patched around March or April. The only systems being attacked by that ransomware are those that haven't updated yet.

Sources:

http://www.businessinsider.com/etern...-botnet-2017-5

EternalBlue - Wikipedia

 

WCry/WanaCry Ransomware Technical Analysis | Endgame

 

You have to think of the people who aren't computer savvy, and would find these useful.

 

Reposting this here, in case someone needs it:

So there's a possibility to get your encrypted files back...for some....
WannaDecrypt your files? The WannaCry solution, for some - Malwarebytes Labs | Malwarebytes Labs