Saturday 20 May 2017

Cyber attack: Latest evidence indicates 'phishing' emails not to blame for global hack

www.telegraph.co.uk/technology/2017/05/15/nhs-cyber-attack-latest-authorities-warn-day-chaos-ransomware/
Latest evidence suggests "phishing" emails are unlikely to have caused the global cyber attack that wreaked havoc at dozens of NHS trusts and hit hundreds of thousands of computers in 150 countries.
Security experts have disputed claims that the virus was spread through suspicious emails, saying that computers were vulnerable to the bug regardless of how vigilant users were. Experts said that unless IT departments patched the virus and backed up their files they could be hit by the attacks.
Affected NHS trusts were criticised for not adding the patch despite warnings from NHS Digital a month ago that they were vulnerable to a possible attack.
Vladimir Putin has blamed the US for the global cyber attack that has crippled computer systems around the world since Friday.
Putin said Russia had "nothing to do" with the attack and blamed the US for creating the hacking software that affects Microsoft computers.
reansomware
"Malware created by intelligence agencies can backfire on its creators," said Putin, speaking to media in Beijing. He added that global leaders needed to discuss cyber security at a "serious political level" and said the US has backed away from signing a cyber security agreement with Russia. 
 
Authorities fear a second wave of the "WannaCry" ransomware could hit systems as people return to work and switch on their computers on Monday morning.
Japanese computer experts said around 2,000 PCs had been affected while the Chinese news agency Xinhua reported that almost 30,000 had been hit.
Authorities had warned of a day of chaos ahead of Monday, with the National Cyber Security Centre saying that existing infections could spread through computer systems.
NHS systems appeared to be largely up and running on Monday, although seven out of the 47 trusts hit by last week's attack are still seeking emergency support, according to NHS Digital.
Patients are being warned of slow service at surgeries, but patient data does not appear to have been compromised. The Home Secretary Amber Rudd will hold a meeting of the emergency COBRA committee later today.
The WannaCry ransomware, which locks computer systems and demands $300 (£230) in Bitcoin, hit over 200,000 computers on Friday and the impact continued to be felt across the weekend. Around £33,000 in ransoms have been paid to date, according to the analysis of Bitcoin wallets.
On Sunday night, Microsoft slammed the US spy agency that had originally developed software that allowed the ransomware attack to infect computers. The "Eternal Blue" tool developed by the National Security Agency had been dumped onto the public internet by a hacking group known as the Shadow Brokers.
It was then used by the still-anonymous cyber criminals to infect PCs with Friday's ransomware.
"The governments of the world should treat this attack as a wake-up call," In a statement, Microsoft president Brad Smith said. "Repeatedly, exploits in the hands of governments have leaked into the public domain and caused widespread damage. An equivalent scenario with conventional weapons would be the U.S. military having some of its Tomahawk missiles stolen."
 
Microsoft released a patch over the weekend for the Eternal Blue vulnerability that defends against it even with older versions of Windows.
Avast Antivirus Support
Click here to read more

Monday 15 May 2017

Microsoft warns ransomware cyber-attack is a wake-up call


A cyber-attack that has hit 150 countries since Friday should be treated by governments around the world as a "wake-up call", Microsoft says.
It blamed governments for storing data on software vulnerabilities which could then be accessed by hackers.
It says the latest virus exploits a flaw in Microsoft Windows identified by, and stolen from, US intelligence.
There are fears of more "ransomware" attacks as people begin work on Monday, although few have been reported so far.
Many firms have had experts working over the weekend to prevent new infections. The virus took control of users' files and demanded $300 (£230) payments to restore access.
The spread of the WannaCry ransomware attack slowed over the weekend but the respite might only be brief, experts have said. More than 200,000 computers have been affected so far.
BBC analysis of three accounts linked to the ransom demands suggests about $38,000 (£29,400) had been paid by Monday morning.
However, the ransomware warning said that the cost would double after three days, so the payments may increase. It threatens to delete files within seven days if no payment is made.
The effect in Asian nations so far on Monday has been limited. South Korea said just nine cases of ransomware had been found, giving no further details.
Australian officials said so far only three small-to-medium sized businesses had reported being locked out of their systems while New Zealand's ministry of the business said a small number of unconfirmed incidents were being investigated.
In Japan, both Nissan and Hitachi reported some units had been affected, while in China energy giant PetroChina said that at some petrol stations customers had been unable to use its payment system.

Norton Antivirus Support Number | Outlook Customer Support Number