You may have heard about, or have had your computer infected by the global cyber attack that began on Friday, which continues to impact a number of countries around the world. Sunday's estimation was that over 150 countries and 200,000 machines have been infected. A CNN report states that the attack has raised just over $51,000.
Most notably among the infected are the hospitals, universities, manufacturers, and government agencies in Britain, China, Russia, Germany, and Spain.
The ransomware dubbed 'WannaCry' locked up users' files and they were held for ransom. To understand more on how this ransomware works, here's a quick explanation:
What is ransomware and malware?
It is essentially software that is harmful to your computer. Ransomware specifically targets your files, taking over your computer and locking you out until you pay a ransom to have your files recovered. Ransomware is a type of malware.
How do you end up with an infected computer?
The most common way your computer becomes infected is through a link, or attachment sent through an email. These are known as 'phishing emails'. Once you click the link or open the file, your computer is instantly infected and the software takes over. In some cases, the links will also ask you to provide personal information, login information, or financial information (ex. credit card number).
"The age-old advice is to never click on a link in an email."
– Jerome Segura, Senior Malware Intelligence Researcher, Malwarebytes
How the malware works
Ransomware, as stated earlier, gathers all of your files, encrypts them, then leaves a message instructing you how to pay to recover them. The encryption key is only known by the attacker, so if you do not pay, it is likely your information will be lost forever.'
Attackers tend to have the ransomware change the look of your computer, by changing the wallpaper, displaying the instructions on how you are to recover the files. Demands are usually between $300 and $500, however, some attackers put a time limit on their demand, which could lead to the ransom doubling if it is not paid within the 24 hour limit.
Law enforcement has advised against paying the ransom.
How to protect yourself:
- Be cautious
- Back up data regularly
- Up to date security
- Up to date software
This cyber attack led experts to warn North American businesses that they should be prepared, as a fresh wave of attacks could be imminent. The main targets of the first wave have primarily been outside of North America.
Aside from the attacks to hospitals, universities, and government agencies, businesses have also been infected. One of the most notable North American businesses to be infected is FedEx. As for local attacks, Lakeridge Health in Oshawa has confirmed it was hit. This caused the Ontario health ministry to be on high alert to ensure that the other 145 hospitals in Ontario remain secure, so they are not infected. Ontario's health ministry even opened a command centre in its downtown Toronto offices on Friday, to provide assistance to any hospitals that experience trouble.
This cyber attack is on record as the biggest of its kind.
Primarily, Microsoft machines were effected, as the malicious software targeted a vulnerability in Windows, that was identified by the U.S.-National Security agency for it's own intelligence gathering, which was then leaked online. Microsoft released a free patch for users to be protected from the malicious software, but only those that updated their computers prior to the attack, were protected.
As we are unsure about the number of attacks remaining, or when they will happen, be diligent about the emails you receive, and what you open within those emails. Never provide personal information, passwords, or financials online, as you could be the next person to become a victim to this worldwide cyber attack.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
