15/05/2017
PROTECTING YOUR COMPUTERS FROM "Wannacry Ransomware"
This ransomware is being referred to by a number of names, including WCry, WannaCry, WanaCrypt0r, WannaCrypt, or Wana Decrypt0r. Since its discovery on Friday afternoon, the WannaCry ransomware attack has continued to spread this weekend, impacting over 10,000 organizations and 200,000 individuals in over 150 countries, according to European authorities. However, while measures have been taken to slow the spread of the malware, new variations have begun to surface.
WannaCry is believed to use the EternalBlue exploit, which was developed by the U.S. National Security Agency (NSA) to attack computers running Microsoft Windows operating systems. EternalBlue exploits vulnerability MS17-010 in Microsoft's implementation of the Server Message Block (SMB) protocol. Although a patch to remove the underlying vulnerability for supported systems (Windows Vista and later operating systems) had been issued on 14 March 2017, delays in applying security updates and lack of support by Microsoft of legacy versions of Windows left many users vulnerable.
The software exploits a security flaw in Windows XP, and once it infects a computer, it encrypts the files and spreads to other computers. Victims receive a demand for a payment of $300 in Bitcoin in order to regain access.
To prevent Wannacry Ransomware please follow these guideliness:
1. Install anti-virus program and update it to the latest virus definition.
2. Always enable Windows Update and update your Windows with the latest fixes and patches.
3. Try to avoid using legacy and out-of-support OS which will not get any Updates from the vendor.
4. If you are running Windows 7 and up OS then don't forget to install RansomFree from Cybereason.