Economy

No substantial impact of WannaCry cyber attack on Indian IT system

No substantial impact of WannaCry cyber attack on Indian IT system”

At the time of writing, it was present in over 100 countries and had infected over a hundred thousand computers in some of the world's largest institutions. Whilst people are strongly advised to move away from the platform, Windows XP is here to stay - it is embedded within many devices, from MRI machines in the health service to Point of Sale systems in large retailers which can not be easily or cheaply upgraded.

Yes. WannaCry's worm-like behavior and its ability to easily propagate across the organisation make this a particularly unsafe strain of ransomware.

In cases where the system has not been previously compromised and implanted with DOUBLEPULSAR, the malware will use ETERNALBLUE for the initial exploitation of the SMB vulnerability.

"The reason this is hitting so many computers at once is that they discovered a vulnerability in the most popular operating system in the world, in Microsoft windows", said John Carlin, former assistant attorney general for national security and an ABC News contributor. Now, three years since the last public update, Windows XP has again been patched to close the WannaCry vulnerability. "Stay away from file extensions like ".exe", ".vbs" and ".scr". The virus encrypts data on infected computers then asks users to pay a "ransom" in order to receive a code that unencrypts the data. Most of those devices couldn't be fixed with new software once they were attacked.

WannaCry, the ransomware cyber attack that has affected computers worldwide, has made its way to India, affecting states like West Bengal, Andhra Pradesh, Telangana, and Kerala.

The use of that domain is being called a "kill switch" in the malware.

It turned out that the ransomware code was written to connect to an unregistered domain and "if the connection is not successful it ransoms the system, if it is successful, the malware exits".

"The operating systems on our computers and software downloads are managed centrally so that regular users can not download executable files from the internet without administrative rights", he said in an email.

What should you do to protect your organization?

"Whenever there is a new patch, there is a risk in applying the patch and a risk in not applying the patch", Grobman said.

In China, many users can't access Microsoft's software patch to fix the vulnerability "because many Chinese computers run on pirated Microsoft operating systems", NPR's Rob Schmitz reports from Shanghai.

With more than 3,500 security engineers at the company, Microsoft said, it is fighting cybersecurity threats with constant updates to its Advanced Threat Protection service. You should also consider adding a rule on your router or firewall to block incoming SMB traffic on port 445. "With the right file sync and backup procedures, even attacked organizations can minimize their recovery points to as little as five minutes while making a full recovery of encrypted data." . "Because they could have done something ages ago to get this problem fixed, and they didn't do it". Various cloud service providers offer good options here, with many professional backup services available.

Savvides emphasized that paying criminals is never recommended, as it feeds them and rewards them for their crimes. Security researches noted some victims of the attack did pay the ransom, in the form of digital currency called bitcoin, but it is unknown how much money the extortionists collected from the victims. Have you taken the necessary steps to ensure you will be eligible to make a claim if your company is impacted? If you have already been impacted and require assistance stopping the spread, determining the impact or recovering your data. The group maintains a worldwide presence with 19,700 employees; annual turnover is more than Euro 1.9 billion. Security is a hard-to-evaluate feature against a possible future threat, and consumers have long rewarded companies that provide easy-to-compare features and a quick time-to-market at the expense of protection.



Like this

Latest




Recommended