What is Wanna Cry virus? How to prevent and treat when infected with Ransomware

On 12/05, the whole world is still not shocked about the large-scale attack on the network called Wanna Cry Ransomware, with about 75,000 ...

On 12/05, the whole world is still not shocked about the large-scale attack on the network called Wanna Cry Ransomware, with about 75,000 computers infected with this virus and it has been present in 99 countries in that is Vietnam. So what is Ransomware Wanna Cry? How does it infect and how to prevent this extortion code from infecting your computer? Let's find out with Hightechbrain.

What is Ransomware Wanna Cry?
Ransomware Wanna Cry or extortion code is a type of malicious code that infiltrates a user's computer device or the computer system of an enterprise connected to the Internet automatically encrypting all files according to Target formats such as images, documents, .. At this time, bad guys will use extortion code to send ransom information and money you have to send them is Bitcoin money, not any kind of money Other common currency. If you agree to send money, they will provide the code to resolve the data, otherwise the data will be considered lost.

According to information received from many newspapers and social networks, many images posted showing the computer screen of the UK National Health Service (NHS) appearing a $ 300 blackmail message with the statement "Data Your has been encrypted ”. Images show that bad claims require payment within 3 days or they will double the price, and in 7 days without payment, the data will be deleted completely.

How this extortion virus gets into a computer

Regarding how to get infected, this WannaCry malicious code took advantage of the security flaw in Windows' SMB protocol to get infected, focusing on Win2k8 and Win XP.

This type of attack differs from the usual attacks of using a computer worm, which means that the program will replicate itself into the computer system and trick users into clicking on a malicious link.

Here are some ways Ransomware Wanna Cry can be used to hack into your computer:

Hackers will send an email with a strange link or a malicious file, when you click it immediately the computer will be infected with WannaCry. And it can get infected from this computer to another computer if the computer system connects to an internet network.
- When you visit a fake website, black web, web sex.
- Do you install software of unknown origin.
- Download and install the Crack software.

The attack on this network has a global scale, affecting about 99 countries around the world, including the US, Britain, Russia, China, Italy, Spain, Taiwan (China), Vietnam and lots of other countries too. As noted by Intel experts, now in Vietnam, this type of extortion code has been discovered in the capital Hanoi and Ho Chi Minh City and will probably spread across the country.

99 countries are affected by WannaCry

According to TheHackerNews, by the end of May 13, Wanna Cry Ransomware's largest extortion virus attack has successfully infected about 200,000 computers running Windows operating systems in at least 99 countries. . In just a few hours of spreading, the hackers behind Wanna Cry collected about $ 30,000.

Not only that, the hacker group created a more sophisticated version of Wanna Cry called Wanna Cry 2.0 and is continuing to infect hundreds of thousands of computers worldwide.

How to prevent and deal with Ransomware Wanna Cry?
According to CMC INFOSEC experts, it is likely that in the next week, this group of hackers will create many new variants of WannaCry as well as more complicated new types of malicious code. One difference of this extortion virus is that they do not infect via email or links that contain malicious code but infect the vulnerability in the SMB protocol of Windows so their spread rate is very fast.

So, the way to prevent it is to temporarily disable SMB and regularly update patches with Windows operating systems, especially servers. Besides, users should not click on strange links in emails or strange files of unknown origin.

Microsoft now has an emergency patch for the SMB protocol, users and businesses can download this emergency patch, used for versions that are no longer supported such as Windows XP, Windows8, Vista, Server2003 and 2008. You can manually update the following link:  https://www.microsoft.com/en-us/download/details.aspx?id=55245&WT.mc_id=rss_windows_allproducts

Wannacry 2.0 is more sophisticated

According to CMC InfoSec experts, this extortion code mainly exploits the vulnerability of Windows 2008 R2 server version and most Vietnamese government agencies as well as businesses are using this version and Windows XP still Existence is no exception. At the present time, this type of malicious code has just appeared so most of the enterprises and individuals have not caught up with the information in time to patch the hole, so the risk of infection is very high.

Experts from CMC Infosec recommend individuals and businesses should back up data and have data backup plans to prevent strange links, especially businesses should best have a personal computer for employees remote when they suspect unsafe Mail, for individuals always have to install anti-virus software on computers and mobile phones, especially specialized softfish for data encryption malicious code to prevent code Wanna Cry money extortion.

How to handle when infected with Ransomware WannaCry

1. You must immediately disconnect the WannaCry-infected computer devices from the LAN, preventing it from spreading to other computers.
2. Paying ransom for those behind WannaCry to get the computer rescue code is a decision for you. Because there are currently no reports of users receiving the rescue code after paying for them. There are currently only 160 transactions sent to the Bitcoin address provided by the bad guys, estimated at $ 300,000. In Vietnam, the price of "rescuing" a WannaCry-infected computer is 2 Bitcoin, not cheap at all.
3. There is still information that exists inside Wanna Cry in the way it encrypts data, so security experts around the world are still looking for ways to exploit and write deciphering services. If the data is important, you can store the WannaCry-infected hard drive and wait for the tool to be released.
4. If your hard drive is not important, format the entire hard drive and reinstall Windows for the computer. You should remember that only when you format the entire hard drive will it completely remove WannaCry, but only reformatting the C drive and reinstalling will not solve the problem at all.
Update: I just found a free 99% free anti-virus software called RansomFree of the cybereason, you just need to download it and install it on your computer, when you click or have the phenomenon If WannaCry is entered, the software will automatically block. Download here and install as usual. I will update continuously in this topic so everyone remember to follow.

Advanced tutorial,6,Bàn di chuột,1,Bàn Phím,2,Bàn Phím Có Dây,2,Basic guide,8,Business information,32,Chuột,2,Cuisine,59,Entertainment,196,Experience when traveling,4,Feng shui - Spirituality,31,Finance – Stock,124,Gamer,412,Games mobile,151,Games News,131,Games PC,80,Health,64,Information technology,156,Life,268,Linh kiện máy tính,1,Make money online,14,Market analysis,22,Market news,36,Máy tính và Laptop,5,News of life,85,Places to eat,2,Quạt và tản nhiệt,1,Science,60,Software tricks,30,Stock market,62,Tai nghe,2,Tai nghe chụp tai,1,Tai nghe nhét tai,1,Technology news,112,The memorable moments,4,Thiết bị điện tử,2,ThoGamer,4,Tourist,8,Tourist – Traveler,22,Travel destination,10,Travel services,2,Traveler,13,Virtual money,57,Virtual money information,35,
High Tech Brain: What is Wanna Cry virus? How to prevent and treat when infected with Ransomware
What is Wanna Cry virus? How to prevent and treat when infected with Ransomware
High Tech Brain
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS CONTENT IS PREMIUM Please share to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy