C tech IT Solution

17/11/2017

17/11/2017

CP PLUS is a leading global manufacturer of advanced security and surveillance solutions with presence in over 60 countries across the globe. Established in ...

29/05/2017

29/05/2017

29/05/2017

How to protect against the WannaCry attacks if you use Kaspersky Lab products for business

Kaspersky Lab engineers have analyzed the information on the cases of infection with the file-encrypting malware known as WannaCry, which attacked a number of companies around the world on May, 12.

For the attack, the known network vulnerability Microsoft Security Bulletin MS17-010 was used. Then, the rootkit was installed on the infected computers, through which the file-encrypting malware was run.

All Kaspersky Lab solutions now detect this rootkit as MEM:Trojan.Win64.EquationDrug.gen. Kaspersky Lab solutions also detect the encryption malware which was used during this attack under the following names:

Trojan-Ransom.Win32.Scatter.uf
Trojan-Ransom.Win32.Scatter.tr
Trojan-Ransom.Win32.Fury.fr
Trojan-Ransom.Win32.Gen.djd
Trojan-Ransom.Win32.Wanna.b
Trojan-Ransom.Win32.Wanna.c
Trojan-Ransom.Win32.Wanna.d
Trojan-Ransom.Win32.Wanna.f
Trojan-Ransom.Win32.Zapchast.i
Trojan.Win64.EquationDrug.gen
PDM:Trojan.Win32.Generic (System Watcher must be enabled for detection of this malware)
Intrusion.Win.DoublePulsar.a (Network Attack Blocker must be enabled for detection of this malware).
We recommend that the companies perform the following actions to minimize the risk of infection:

Install the official Microsoft patch, which fixes the vulnerability exploited by this malware:
For currently supported operating systems
For operating systems that are no longer supported
Make sure antivirus solutions are enabled on all nodes in the network.
Update databases of all Kaspersky Lab solutions used.
To view the detailed guide for your Kaspersky Lab solution, see the section How to avoid network infection later in this article.

Kaspersky Lab experts are currently analyzing the malware samples to find decryption options.

For detailed information about the WannaCry attacks, please refer to the Kaspersky Lab report.

http://support.kaspersky.com/general/products/13698

28/05/2017