WannaCry Ransomeware Protection

How it works:
WannaCry is a form of ransomware that locks up files on your computer and encrypts them in a way that you cannot access them anymore. It targets Microsoft’s widely used Windows operating system.
When a system is infected, a pop-up window appears with instructions on how to pay a ransom amount of $300.
The pop-up also features two countdown clocks; one showing a three-day deadline before the ransom amount doubles to $600; another showing a deadline of when the target will lose its data forever. Payment is only accepted in bitcoin.
The ransomware’s name is WCry, but analysts are also using variants such as WannaCry.

How it spreads:
Ransomware is a programme that gets into your computer, either by clicking or downloading malicious files. It then holds your data as ransom.
Some security researchers say the infections in the case of WannaCry seem to be deployed via a worm, spreading by itself within a network rather than relying on humans to spread it by clicking on an infected attachment.
The programme encrypts your files and demands payment in order to regain access. Security experts warn there is no guarantee that access will be granted after payment.
Some forms of ransomware execute programmes that can lock your computer entirely, only showing a message to make payment in order to log in again. Others create pop-ups that are difficult or impossible to close, rendering the machine difficult or impossible to use.

What can you do to prevent infection:
Here are the steps you should take to protect yourself against ransomware:
– Install and use an up-to-date anti-virus solution (such as Microsoft Security Essentials)
– Make sure your windows software is up-to-date
– Avoid clicking on links or opening attachments or emails from people you don’t know or companies you don’t do business with
– Ensure you have smart screen (in Internet Explorer) turned on, which helps identify reported phishing and malware websites and helps you make informed decisions about downloads
– Have a pop-up blocker running on your web browser
– Regularly backup your important files
– Be wary of visiting unsafe or unreliable sites.
– Never click on a link that you do not trust on a web page or access to Facebook or messaging applications such as Whatsapp and other applications.
– If you receive a message from your friend with a link, ask him before opening the link to confirm, (infected machines send random messages with links).
– Be aware of fraudulent e-mail messages that use names similar to popular services such as PayePal instead of PayPal or use popular service names without commas or excessive characters.

Ensure you have applied the windows fix given at Microsoft documentation @ https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

Leave a comment