Wannacry - Ransomware

[buttsie]

As it appears this thing is only going to go from bad to worse as it morphs from one version to the next

Decryption tool for the first version created
- useful backup for windows 7 users having issues with getting MS updates to work

https://www.askwoody.com/2017/breaki...low-the-rules/

Advice for Windows 7/8/10
(even though the ransomware was primarily aimed at Windows 7)

Why and how to disable SMB1 on Windows 10/8/7

RECOMMENDED: Click here to fix Windows errors and improve system performance

Though security concerns with systems are nowhere new, the mess caused by the Wannacrypt ransomware has prompted for immediate action among netizens.

The Ransomware targets the vulnerabilities of the SMB service of the Windows operating system to propagate.

SMB or Server Message Block is a network file sharing protocol meant for sharing files, printers, etc, between computers. There are three versions – Server Message Block (SMB) version 1 (SMBv1), SMB version 2 (SMBv2), and SMB version 3 (SMBv3).

Microsoft recommends that you disable SMB1 for security reason – and it is not more important to do so in view of the WannaCrypt or WannaCry ransomware epidemic.

http://www.thewindowsclub.com/disable-smb1-windows

[buttsie]

Although the WannaCry Ransomware epidemic may have been currently halted in its tracks currently, you may expect the next wave to be more virulent.

In our post on WannaCry Ransomware, we have listed the ways you can protect yourself from being infected with this Ransomware – the most important one being the installation of the patches released by Microsoft for all Windows versions.

http://www.thewindowsclub.com/free-v...cry-ransomware


Related Posts:Links to other articles about similar topics

List of free Ransomware Decryptor Tools to unlock files
Ransomware Attacks, Definition, Examples, Protection, Removal, FAQ
Malware Removal Guide & Tools for Beginners
How to protect against and prevent Ransomware attacks & infections
WannaCrypt or WannaCry Ransomware Decryptors are available


Personally i think its more about being pragmatic & using common sense

keep everything on your PC up to date

Never click on a link from an untrusted source - for new friends that you know little about
- i'd be opening in a sandbox - that newly arrived energy bill - never assume its real before you click - where did it come from - bogus emails are the number 1 cause of ransomware.

I had a survey from my energy supplier sent to me recently which has always been multiple choice questions no video - this wanted me watching video - i deleted it immediately

http://www.techsupportalert.com/cont...y-concerns.htm

Links in skype , PMs , IM etc can do exactly the same
- those friends who befriended you when you'd had no contact on the forum?

Windows updates is a no brainer but what about all other software?

Personal software inspector (PSI - security updates) and 3 others that go further
None are perfect but its better than doing nothing imho

http://www.techsupportalert.com/best...te-monitor.htm

If you want the full gambit on browsers via the main rendering engines

How to Harden Your Browser Against Malware and Privacy Concerns - 2015

http://www.techsupportalert.com/cont...y-concerns.htm

In my experience about the only truly effective deterrent to malware if you go here there and everywhere is a script blocker & keeping everything up to date

Avoid keeping plugins up to date and....


Its amazing to watch how ineffective a script blocker is if you have a
vulnerable plugin in your browser...you might as well not be using the script blocker


PS forget this little issue

If your security suite insists on adding an extension to your browser 3rd party browser - say no

Chrome and a security suite extension awhile back showed the extension
actually made the browser vulnerable to attack.

[buttsie]

Martin Brinkmann has updated the ghacks.net Security overview, to 23 May 2017.

As well as reviewing named programs that act to prevent ransomware

A handy table compares the various paid and free software options - 13 all up.
(located halfway down page)

Decryption is also discussed, should you have the misfortune to not prevent an infection.
List of 62 different types of ransomware

https://www.askwoody.com/2017/anti-r...erview-update/

[befuddled]

And of course we all make regular backups, right? Of course, most of us don't make regular backups, even those of us who know better. So, I'll make 3 suggestions:

1. Backup your data. Twice! because backups and the media on which it is stored can fail. Do this regularly

2. Encrypt the backups if they contain sensitive and/or personal data.

3. Image your pc. Do this regularly. If you don't know how to image your pc, learn. You will never regret the time and trouble you spent to learn.

Remember: "Paranoia is your best friend when it comes to your data."--Me. :-p

[befuddled]

And, buttsie, all your posts are informative and instructive and all around outstanding. I see you are a technomage. ;-)

[buttsie]

I just know where to find the how to sites / articles written by those that really know

Best Free File-Based Backup Program - last updated 26.2.2017

Links to in depth articles on all types of backing up

Types of Backup Software : What’s the difference between Disk Imaging, File Based Backup, or Synchronization, and which should I use?

http://www.techsupportalert.com/best...up-program.htm

[buttsie]

New ransomware strain inspired by WannaCry

Currently aimed at Business but most likely individuals via email wont be far away
some are claiming

The bad news is the ransomware email account has been disabled

The good news is theres a simple vaccine to stop any infection

Cybereason security researcher Amit Serper has found a way to prevent the Petya (NotPetya/SortaPetya/Petna) ransomware from infecting computers.

automatic download or manual instructions

11 hours ago
https://www.bleepingcomputer.com/new...ware-outbreak/



PS - this explains why the ransomware email being nobbled didnt matter


Petya.2017 is a wiper not a ransomware:

The ransonware was a lure for the media, this version of Petya actually wipes the first sectors of the disk like we have seen with malwares such as Shamoon.”

Variant of Petya ransomware is spreading fast

https://www.askwoody.com/forums/topi...preading-fast/

[pigulici]

So the fun with crypted data begin again..