05/18/2017
MAJOR ALERT:
As you may have heard, last week an extensive malware attack began sweeping the globe. The ransomware, known as WannaCry, extorts money from victims by exploiting a flaw in Microsoft Windows. WannaCry enters a computer through an unreliable website, email link or attachment, it proceeds to encrypt and lock down all files on the newly infected PC. Shortly after, a ransom is sent requiring a payment to regain control of the data. Some of the current ransoms have been demanding pay-offs be made within six hours or the price escalates with all data being deleted after a certain period.
Not only does the ransomware affect your computer, but it has a file sharing technology that will seek out other vulnerable PC’s on your local network and spread the malware. So, if you are at a local coffee shop utilizing their network with an infected laptop, it will also spread to other vulnerable PC’s accessing the network, making it very fast-spreading and one of the most damaging attacks in history.
As WannaCry continues to evolve into newer and more aggressive versions, it is important to take some preventative steps to secure your data and PC.
-Update your systems to include the latest patches and software available.
-Older software versions and operating systems are still widely used among many business owners, it is important to update these older versions as they no longer receive support and security fixes to prevent malware attacks.
-Do not download attachments or click unfamiliar links from outside email sources.
-Install an anti-spam service to your email as another layer of defense.
-Back up the data you cannot afford to lose regularly to prevent loss.
-Prepare a disaster recovery plan for business continuity.
Many companies are not admitting to paying a ransom, as it shows they were easily compromised, so at this time it is hard to tell if data is returned once the ransom is paid. If you have been infected by WannaCry the FBI is advising the number one thing to do is access your backups. If you do not have any, they recommend you pay the ransom. This is highly risky as you may get nothing in return, and if you do receive a key to decrypt, it may still allow the attacker access to your machine to return and hold it ransom again.
If you are unsure about your vulnerability, contact us for questions or for us to look at your office and network setups. This is moving in fast, so do not delay.