WannaCry Ransomware

What Is It?

On May 12 2017, a new strain of ransomware began spreading across the world, currently affecting users in approximately 150 countries!

The ransomware in question is called WannaCry and is spreading via email, through fake invoices, job offers and other lures with a .zip file that initiates the WannaCry infection.The virus essentially holds your files hostage and demands a ransom of $300 to $600 in bitcoin to be paid by May 15, and in the event that the deadline is missed, the fee increases by May 19.

The virus works by exploiting vulnerabilities in unsupported systems, mainly Windows XP, Windows Vista and Windows Server 2003.

 

What To Look For:

If you have been infected, you will see the following displayed on your computer screen.

 

As a Webroot and answers IT Customer, Are You Protected?

Yes! In simple terms, this ransomware itself is similar to others that have been seen before. It’s the advanced delivery mechanism that is catching organisations off guard.

 

Top Tips

1) Do not open or respond to emails that look suspicious, unusual or from someone you don’t know that ask you to make an action such as provide personal information, credit card details or ask you to make a payment. If the email claims to be from a genuine company, but originated from a free web-based email service, it’s likely to be spam.

2) Do not open an attachment you weren’t expecting, especially if you don’t know the sender. Often malicious code masquerades as Word documents or some other file type. Scammers can easily change an .EXE extension of a malicious file to .DOC. If you think that you may have received such a file, it’s best to check with us before doing anything with it.

3) Just as you should not open attachments, do not click on a link in an email unless you are 100% sure it is safe to do so. It is easy to interject an infected hyperlink into the body of an email. If in doubt, delete (or check with the sender or our helpdesk).

4) Have an active Support Agreement with answers IT, which will provide you with proactive maintenance to minimise risks against ransomware attacks.

 

Managed Service Customers

If you are an Answers IT managed service customer, please take comfort in the fact that you are also covered by additional defences to decrease your risk of infection.

If you have any questions regarding WannaCry Ransomware, please call our support desk on (07) 3123 7929.