Ransomware & WannaCry Information

Ransomware is a malicious software that encrypts the files and locks device, such a a computer, tablet or smartphone and then demands a ransom to unlock it. Recently, a dangerous ransomware named 'Wannacry' has been affecting the computers worldwide creating the biggest ransomware attack the world has ever seen. This has affected computers in India also.
What is WannaCry Ransomware?
-------------------------------
WannaCry ransomware attacks windows based machines. It also goes by the name WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY.It leverages SMB exploit in Windows machines called EternalBlue to attack and inject the malware. All versions of windows before Windows 10 are vulneable to this attack if not patched for MS-17-010.
After a system is affected, it encrypts the files and shows a pop up with a countdown and instructions on how to pay the 300$ in bitcoins to decrypt and get back the original files. If the ransom is not paid in 3 days, the ransom amount increases to 600$ and threatens the user to wipe off all the data. It also installs DOUBLEPULSAR backdoor in the machine.
What can you do to prevent infection?
----------------------------------------
 Microsoft has released a Windows security patch MS17-010 for Winodws machines.
This needs to be applied immediately and urgently.
 Remove Windows NT4, Windows 2000 and Windows XP-2003 from production environments.
 Block ports 139, 445 and 3389 in firewall.
 Avoid clicking on links or opening attachments or emails from people you don't know or companies you don't do business with.
 SMB is enabled by default on Windows. Disable smb service on the machine by going to Settings > uncheck the settings > OK  Make sure your software is up-to-date.
 Have a pop-up blocker running on your web browser.
 Regularly backup your files.
 Install a good antivirus and a good antiransomware product for better security.
File Names:
• @Please_Read_Me@.txt
• @WanaDecryptor@.exe
• @WanaDecryptor@.exe.lnk
• Please Read Me!.txt (Older variant)
• C:\WINDOWS\tasksche.exe
• C:\WINDOWS\qeriuwjhrf
• 131181494299235.bat
• 176641494574290.bat
• 217201494590800.bat
• [0-9]{15}.bat #regex
• !WannaDecryptor!.exe.lnk
• 00000000.pky
• 00000000.eky
• 00000000.res

• C:\WINDOWS\system32\taskdl.exe

Cheers!!!
Be Confident, Do Confident.

Comments

Post a Comment

Popular posts from this blog

Talented Indian Leaders - ( Leaders are not born, built by their own Hard work )

Narendra Modi  : Narendra Damodardas Modi is an Indian politician who is the 14th and current Prime Minister of India, in office since May 2014. He was the Chief Minister of Gujarat from 2001 to 2014, and is the Member of Parliament for Varanasi. A.P.J Abdul Kalam : Avul Pakir Jainulabdeen Abdul Kalam better known as A.P.J. Abdul Kalam; was the 11th President of India from 2002 to 2007. Dr. Ambedkar : Bhimrao Ramji Ambedkar, popularly known as Baba Saheb, was an Indian jurist, economist, politician and social reformer who inspired the Dalit Buddhist Movement and campaigned against social discrimination P.V. Narasimha Rao :Pamulaparti Venkata Narasimha Rao was an Indian lawyer and politician who served as the 9th Prime Minister of India, from 1991–1996. P V Narasimha Rao called as Modern Indian's Chanakya. A B Vajpayee : Atal Bihari Vajpayee is an Indian politician who was the 10th Prime Minister of India, first for 13 days in 1996 and then from 1998 to 2004. KCR ( ...
Read more

How to Attend Telephonic Interview - (Plan it, Do it. Definitely you will win it.)

Telephone Interview Preparation In preparing for your phone interview, there are several things you can do. Tape your resume to a wall in view of the phone. It will be there for the call and will be a constant reminder for your job search. Keep all of your employer research materials within easy reach of the phone. Have a notepad handy to take notes. If the phone interview will occur at a set time, there are additional steps you can take: Place a "Do Not Disturb" note on your door. Turn off your stereo, TV, and any other potential distraction. Warm up your voice while waiting for the call. Sing an uplifting song to yourself. Have a glass of water handy, since you will not have a chance to take a break during the call. Speaking of breaks, if your phone interview is at a set time, make sure you answer nature's call first. Turn off call waiting on your phone. Here is a simple technique to increase the enthusiasm and pos...
Read more

Revolutionary Technologies/Social Media of World - ( Think Big, Do Big. Don't Limit yourself to grow high )

Microsoft :  Microsoft Corporation is an American multinational technology company headquartered in Redmond, Washington. It develops, manufactures, licenses, supports and sells computer software, consumer electronics, personal computers, and services. Google : Google is an American multinational technology company specializing in Internet-related services and products. These include online advertising technologies, search, cloud computing, software, and hardware Facebook : Facebook is an American for-profit corporation and an online social media and social networking service based in Menlo Park, California. Instagram : Instagram is a mobile, desktop, and internet-based photo-sharing application and service that .... million, details that were confirmed the following month, when Instagram raised $50 million from venture capitalists with a $500 million valuation Twitter : Twitter is an online news and social networking service where users post and interact with messa...
Read more