A large-scale ransomware attack, WannaCry, that infected computers all over the world left governments, health care institutions, and companies reeling. Britain’s National Health Service was infected, resulting in the temporary closure of some emergency rooms.
Ransomware infects a computer, locking users out of certain applications or files until a ransom is paid.
PC casualties were expected to rise today as workers return to work to find WannaCry infecting their work PCs.
CNN Tech reports:
Organizations around the world spent the weekend trying to recover after being hit by a virus that seeks to seize control of computers until victims pay a ransom.Hospitals, major companies and government offices were among those that were badly affected. Cybersecurity experts have said the majority of the attacks targeted Russia, Ukraine and Taiwan. But U.K. hospitals, Chinese universities and global firms like Fedex (FDX) also reported they had come under assault.U.S. Treasury Secretary Steven Mnuchin, at a meeting in Italy, said Saturday the attack was a reminder of the importance of cybersecurity. “It’s a big priority of mine that we protect the financial infrastructure,” he said.Europol’s Wainwright underscored the point Sunday. All sectors of the economy were vulnerable and organizations could take lessons from the banking industry, which appeared to have largely escaped the global attack.”Very few banks if any have been affected because they’ve learned from painful experience of being the number one target for cybercrime,” he said on ITV’s Peston on Sunday program.
WannaCry, an NSA cyber tool, was leaked online by a group of anonymous hackers, Shadow Brokers, a month ago.
The virus leverages a vulnerability in a Windows. Computers without the latest system updates are susceptible.
The ransomware is spread by taking advantage of a Windows vulnerability that Microsoft (MSFT, Tech30) released a security patch for in March. But computers and networks that hadn’t updated their systems were still at risk.In the wake of the attack, Microsoft said it had taken the “highly unusual step” of releasing a patch for computers running older operating systems including Windows XP, Windows 8 and Windows Server 2003.The patches won’t do any good for machines that have already been hit.
A 22-year-old helped to thwart the attack. According to CBS:
A 22-year-old cyber security researcher registered a domain accidentally, helping to thwart the cyberattack that spread malicious software around the world, shutting down networks at hospitals, banks and government agencies.Working with a fellow cyber-sleuth in the UK, they were able to throw the so-called “kill switch” that stopped the attack in its tracks and allowed the thousands of infected systems to begin recovering from the attack, but not before more than $20,000 in bitcoin ransoms had been paid at $300 to $600 a pop.
Follow Kemberlee on Twitter @kemberleekaye
CLICK HERE FOR FULL VERSION OF THIS STORY