Last Friday, May 12, 2017, a world-wide ransomware attack was launched using the WannaCrypt, a.k.a, WannaCry, ransomware program in "phishing" emails and through the EternalBlue network software exploit to infect Microsoft Windows systems. Specifically, the attack is designed to take advantage of a vulnerability in the Microsoft Windows operating system that was identified earlier this year and for which Microsoft issued a "critical" patch on March 14, 2017 for systems running Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8.1, Windows Server 2012, Windows 10, Windows Server 2012 R2, Windows Server 2016 (see, Microsoft Security Bulletin MS17-010).
Ransomware programs such as these usually work by sending an email with a link or attachment that the recipient clicks on to open and which results in an immediate encryption of all files and lock down of the computer and a demand for payment to unlock it or the threat of having all of the files on the computer permanently deleted. Although it has not been definitively determined to date, it is also believed that the WannaCrypt/WannaCry ransomware program can also be spread through connections between unpatched computer systems.
Microsoft has issued patches for Windows operating systems that are no longer regularly supported (i.e., Windows XP, Windows 8, and Windows Server 2003). If you are unable to reach the site due to high traffic volume, visit the Microsoft Update Catalog.
If you have not installed the patches, Microsoft is strongly recommending that you install the appropriate patch immediately. Also, if you do not have an anti-virus program installed, it is a good idea to do so as soon as possible to thwart future attacks. Programs that receive regular definitions from Microsoft and other software developers with information to scan and protect your computer from harmful attacks, are particularly effective in preventing and identifying future attacks.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
