Tuesday, May 16, 2017

WannaCry Ransomware

By Jeff Joyner 

The WannaCry ransomware (aka WannaCrypt) is a ransomware computer worm infecting 200,000+ computers worldwide. It targets MS Windows systems (desktop and server) exploiting an SMB protocol vulnerability resulting in files getting encrypted until the victim pays a ransom in BitCoin currency ($300-$600) to the attacker. Windows 10 and Windows Server 2016 operating systems are not affected by this attack.

A patch was released by Microsoft for each of the affected, currently supported operating systems back in March. Patching systems with Windows Updates is an easy way to prevent devices from being infected. 

For information on older systems (Windows XP, Server 2003), Microsoft has published additional guidance at this link: https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

Additionally, MalwareBytes and Webroot have stated that they actively block WannaCry attacks.

Call CTG sales or your account manager to learn how we can secure your network from threats like this.

Jeff Joyner is a Senior Network Engineer at Convergent Technologies Group.