WannaCry Ransomware: What is it? And How to Protect Yourself?

Last Friday the cyber world was hit by one of the most devastating cyber attack in the recent history. It is called “WannaCry” Ransomware. It has infected nearly 300,000 computers in 150 countries and is still at large.

It is considered very dangerous because of the thing that it done to your computer. Just think what would it like if you lost all of your computer data, for example things like family pictures, confidential documents or any important research data from your work. The only way to acquire that data is pay an anonymous person. You have to pay your money to get you own data. This is the new way of extortion which is done online and don’t left any traces while doing so.

In this guide we will try to answer most of the question related to what Ransomware is?, Where does it come from?, How you can prevent it from infecting your computer? And etc. So let’s start;

What is Ransomware?

Ransomware is malicious software which executes the cryptoviral extortion attack. What it mean is that the Ransomware blocks any access (accept the attacker) to your data until you pay some kind of ransom to attacker. It also display a message requesting a fee to give it back to you.

Many of the basic type of Ransomware could be easily reversible by a knowledgeable hacker. But if it’s highly encrypted, that it will make most of the computer files inaccessible to you. It will encrypt your computers Master Class File (MFT) or if you are unlucky enough it will block the entire hard disk.

What is Wannacry/Wannacrypt Ransomware?

The WannaCry is a highly modified Ransomeware which is rapidly spreading across all over the cyberspace infecting “Windows” computer. It started spreading on Friday the 12 ^th May 2017. It affects the computer by exploiting a Windows component known as Server Message Block (SMB). You can look for the exploit with the name “ETERNALBLUE” on your Windows computer. As most of the Ransomware it will lock (encrypt) your hard disk. And, if you have other computers connected through LAN, It will laterally spread between them. Scary right!

This is how Wannacry Ransomware infected Britain’s health system and global shipper FedEx. Even the pirates are not safe, it is also stated that Disney movie “The Pirate of The Caribbean 5” has also been stolen by this Ransomware and the attackers are asking for a hefty price or they will made the movie public. It is believed that the creator of this malicious software is no other that the USA security agency known as the National Security Agency (NSA).

For most of the people, attackers are asking for hefty payments of $300 to $600 to restore access. Mode of payment is in Bitcoin. It is a digital currency which cannot be traced online.

How can I prevent WannCrypt Ransomware from infecting my computer?

Well the best way to prevent WannCrypt from infecting your computer is to be vigilant and “DO NOT” open any suspicious (even a little) email attachment.

As per Cyber Swachhta Kendra there are many file extensions that the Ransomware can latch on to. The file extensions are given below.

1. Do Not Open These File Extensions!

2. Update your Windows

• For Windows Vista, 7, 8.1, and 10: Microsoft has released a security update which rectifies the issues regarding these “backdoors” that this attack is exploiting. Note that if your PC is up-to-date than you don’t have to worry about it.
• If for any reason that you have not applied these security update, we strongly recommend you to visit Microsoft Security Bulletin MS17-010 and install the appropriate version for your PC. (Note the update will only stop the infection from spreading any further. But it will not heal or decrypt your files)
• Activate Windows Defender: If you are using Windows Defender as a default antivirus that update is as soon as possible. Earlier this week Microsoft has updated it to detect Wanna cry as Ransom:Win32/WannaCrypt . But if you use any other antivirus or anti-malware kindly update them as soon as possible.

“ How can I protect my computer running on windows XP or Windows Server 2003 from WannaCry?”

If you are still using windows older versions like Windows XP, Windows Server 2003 or Windows 8. You don’t have to fear anything because Microsoft has created the security updates for them too. ( Download links)

3. Extra steps to protect your computer from ransomware completely.

• According to Microsoft, attack like these may evolve in the future. Hence, any further precaution will provide better security. Again we recommend you to please DO NOT open any suspicious attachments even if looks familiar.

4. Enable popup blocker.

• Many malicious software use popup as a primary tactic. For instance hackers put a pop on your screen, and if you try to close it by clicking the button which might have been reprogrammed by the attackers.

5. MOST IMPORTANT – Backup you data.

• DO NOT procrastinate. It will take time, it will make you wait but it will be worth it. Take a moment and create a backup of your files on a SEPARATE hardisk.

Important Sources

• For more information on malware and how to protect yourself from it you can visit Microsoft Malware Protection Center here .
• A Webinar for Wanna Cry Ransomware from Microsoft. This Ransomware is such a great threat to Windows that Microsoft is organizing a webinar on Wannacry Attack on May 22 ^nd, 11am. To join the webinar visit this link .
• Microsoft is looking for people to help them protect Windows as the Malware evolves in the future. To learn more about any update regarding Ransomware Wannacrypt visit https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
• You can also visit Brad Smith (President, Microsoft) blog here to get a deeper understanding about Wanna crypt ransomware.
• For India Only – you can ask Microsoft question at [email protected] .
• If you are looking for official Microsoft page regarding Wannacre Ransomware you can click here

FAQs

Q. Can I also run this update on my pirated Windows?

A. Maybe but we recommend you to use genuine version Windows to install updates.

Q. I am running Windows 10. Is it also vulnerable to Wannacry Ransomware attack?

A. No, the Ransomware is designed to infect outdated Windows i.e. Windows XP, Server 2003, 2003 R2, 2008 and Windows 7. So Windows 10 users are… For now.

Q. Is this update compatible with my Windows 2003 R2?

A. The Windows 2003 R2 updates are same as Windows 2003. So you will not have any issues.

Q. What if I don’t give admin rights to my clients? Am I safe then?

A. No. Once WannaCrypt Ransomware executes itself, there is no turning back. It will encrypt all the files it can reach in your computer or any other computer connected to yours via LAN. It will also try making some registry changes in HKLM hive which require Admin authority and also tries to disable shadow copies on your pc. Hence the computer will be infected whether the user has admin rights or not.

Q. Am I safe from any future malware or Ransomware attacks?

A. No. Applying the recent Microsoft update will only stop the Ransomware from spreading. The security update cannot protect against the infection itself.