{"id":158327,"date":"2017-06-29T04:53:00","date_gmt":"2017-06-29T09:53:00","guid":{"rendered":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/"},"modified":"2017-06-29T04:53:00","modified_gmt":"2017-06-29T09:53:00","slug":"a-new-strain-of-ransomware-is-even-more-virulent","status":"publish","type":"post","link":"https:\/\/ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/","title":{"rendered":"A New Strain of Ransomware is Even More Virulent"},"content":{"rendered":"

This is a simple breakdown of the new ransomware attacks spreading globally. The attack is quite different to anything that has been spread in the past. The intention may not even be money. \u00a0<\/strong><\/p>\n

\"Ransomware\"<\/p>\n

Recently, a new and viral malware has been spreading throughout Europe. News organizations such as the Washington Post and The New York Times have been talking about it quite a lot. However, no one seems to have much information about it.<\/p>\n

The stories began on the morning of June 27, 2017. While its method of infection has not been discovered, it is known that this malware in behaving like a worm. That means when one node is infected, it tries to spread to other nodes. When the virus infects a computer, it shows a \u201cChkdisk\u201d screen that is meant to entice the user not to power off. This attack has been touted to be even worse than the Wannacry attack.<\/p>\n

Kaspersky Discovered in First.<\/strong><\/p>\n

Kaspersky actually discovered this Ransomware a while back. Since then, they have noted that it has been spreading for weeks. The reason why it has become such a big issue in recent days is that it has started to affect huge organizations, especially government organizations.<\/p>\n

What is Known About it.<\/strong><\/p>\n

Some researchers have christened it PetyaWrap. It uses a potent mix of techniques to enter a network and from there spread to all computers in that network. As with other attacks from ransomware such as WCry, it made use of EternalBlue. This advanced exploit was developed by the NSA to snoop on unwitting users of the Windows OS.<\/p>\n

The new attack used a new exploit called the EternalRomance, which was developed by the NSA. Microsoft developed a patch for the vulnerabilities. However, many computers remain quite vulnerable. People with basic technical skills now have a powerful method to deliver any kind of digital warhead that they wish to install in a computer. It is especially so for those who had not installed the updates from Microsoft.<\/p>\n

However, EternalRomance was not the only exploit that it used. The recent attack showed that it was a major improvement over past attacks. The new attack also used Mimikatz, which is a tool used to extract passwords from computers on a network. With that ability, they could use PSExec, which is a legitimate component of Windows.<\/p>\n

That means even computers that had updated their OS and were immune to EternalRomance and EternalBlue could be hacked. Some of the Ransomware is also using a vulnerability of Ukrainian software called MeDoc. The result is that MeDoc is being used to send updates to the end users.<\/p>\n

MeDoc Could be Patient Zero.<\/strong><\/p>\n

Kaspersky just fell short of saying MeDoc was the reason this ransomware attack spread so fast. Others are also fingering MeDoc<\/a> as being the source of the weakness. MeDoc only indicated that their server made a virus attack in an update on their site. Most analysts have interpreted the post as MeDoc admitting guilt.<\/p>\n

How it Works.<\/strong><\/p>\n

When the malware creeps into a computer, it waits for about 10 minutes before it reboots the computer. After that, the hard disk is encrypted, and a $300 ransom is demanded when the computer restarts. If someone switches off the computer before it reboots, he or she could save their computer if they allow a professional to restart their computer.<\/p>\n

\u00a0<\/p>\n

Ukraine Was Hit Hard.<\/strong><\/p>\n

Many news organizations globally report that Ukraine was hit hard. The malware hit metro networks, power companies, government sites, banks, airports, media organizations, and state corporations. Even the radiation monitors at Chernobyl were not spared.<\/p>\n

One of the reasons WCry was killed off was that its developers hard-coded a kill switch into it. However, researchers are concerned that there may be no simple solution to stopping the spread this time.<\/p>\n

Reports of Windows 10 Attacks.<\/strong><\/p>\n

Some reports indicate that it was able to attack an updated Windows 10 computer. Besides that, it is said that the computer had a working anti-virus installed and had the SMBv1 protocol switched off.<\/p>\n

It is also Stealing Credential.<\/strong><\/p>\n

This new strain is targeting the master boot record of computers. It is an important file, which allows the computer to locate the OS and other important components. However, it also delivers a payload that steals usernames and passwords and sends it to a server under the control of the attackers. That means the attackers could be in possession of high-value data.<\/p>\n

The attack was initially limited to Ukraine and Russia. However, it soon spread to Poland and then to Italy, Spain, France, US, and India. Major law firms and other companies in the UK said that their systems were under attack.<\/p>\n

Peculiar Attack.<\/strong><\/p>\n

Victims of the attack were told that they had to email payment details. Within a few hours, the email went down. That made it impossible for those who had paid the money to recover data. The result was that it led to speculation the aim of the attack was destruction, not money.<\/p>\n

What Can You Do to Stay Safe.<\/strong><\/p>\n

There are a few Steps, which computer users can take to stay safe. They are actually quite effective.<\/p>\n

\u00b7 Question All Attachments.<\/strong><\/p>\n

In a world where digital spoofing is so easy, do not trust anything. Do not open an attachment unless you were expecting it to arrive. If you feel you must open it, use your phone to call the person so that you can verify they sent an email to you.<\/p>\n

\u00b7 Do not click Links in an Email.<\/strong><\/p>\n

Before opening a link, position the cursor over it. If the URL is different from the text over it, avoid opening it. Besides that, use your phone to confirm any link sent to you.<\/p>\n

\u00b7 Be Attentive.<\/strong><\/p>\n

If an email uses language that suggests urgency, you should be quite cautious about clicking on it. If an email offers something to you for clicking the email, avoid it. Additionally, any email that seeks to generate some emotional response from you needs to be watched carefully.<\/p>\n

\u00b7 Stay Focused on Your Work.<\/strong><\/p>\n

Avoid receiving funny cat videos from your friends all the time. It is possible to receive a video that has bugs encoded into it. Unless your job involves studying cats, avoid unnecessary downloads at all times.<\/p>\n

Most importantly, never pay any ransom. There is no guarantee you will receive the decryption key.<\/p>\n","protected":false},"excerpt":{"rendered":"

This is a simple breakdown of the new ransomware attacks spreading globally. The attack is quite different to anything that has been spread in the past. The intention may not even be money. \u00a0 Recently, a new and viral malware has been spreading throughout Europe. News organizations such as the Washington Post and The New…<\/p>\n","protected":false},"author":5,"featured_media":158328,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[8],"tags":[],"class_list":["post-158327","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"\nA New Strain of Ransomware is Even More Virulent - IT Services in Virginia<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A New Strain of Ransomware is Even More Virulent - IT Services in Virginia\" \/>\n<meta property=\"og:description\" content=\"This is a simple breakdown of the new ransomware attacks spreading globally. The attack is quite different to anything that has been spread in the past. The intention may not even be money. \u00a0 Recently, a new and viral malware has been spreading throughout Europe. News organizations such as the Washington Post and The New…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/\" \/>\n<meta property=\"og:site_name\" content=\"IT Services in Virginia\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-29T09:53:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg\" \/>\n<meta name=\"author\" content=\"Steve West\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Steve West\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/\",\"url\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/\",\"name\":\"A New Strain of Ransomware is Even More Virulent - IT Services in Virginia\",\"isPartOf\":{\"@id\":\"https:\/\/www.ntegrait.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg\",\"datePublished\":\"2017-06-29T09:53:00+00:00\",\"dateModified\":\"2017-06-29T09:53:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.ntegrait.com\/#\/schema\/person\/33156c118f002b88019c3fc70441bf79\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage\",\"url\":\"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg\",\"contentUrl\":\"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg\",\"width\":479,\"height\":359},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ntegrait.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A New Strain of Ransomware is Even More Virulent\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ntegrait.com\/#website\",\"url\":\"https:\/\/www.ntegrait.com\/\",\"name\":\"IT Services in Virginia\",\"description\":\"Ntegra IT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ntegrait.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.ntegrait.com\/#\/schema\/person\/33156c118f002b88019c3fc70441bf79\",\"name\":\"Steve West\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ntegrait.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3cc273f166c78aca895198956663df42?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3cc273f166c78aca895198956663df42?s=96&d=mm&r=g\",\"caption\":\"Steve West\"},\"description\":\"Ntegra IT is devoted to providing reliable Computer Support to businesses that want to improve productivity and profitability. We deliver custom designed Network Services that better map to your business, so you can stop worrying about your technology and get back to achieving your business goals.\",\"url\":\"https:\/\/ntegrait.com\/author\/swestntegrait-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A New Strain of Ransomware is Even More Virulent - IT Services in Virginia","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/","og_locale":"en_US","og_type":"article","og_title":"A New Strain of Ransomware is Even More Virulent - IT Services in Virginia","og_description":"This is a simple breakdown of the new ransomware attacks spreading globally. The attack is quite different to anything that has been spread in the past. The intention may not even be money. \u00a0 Recently, a new and viral malware has been spreading throughout Europe. News organizations such as the Washington Post and The New…","og_url":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/","og_site_name":"IT Services in Virginia","article_published_time":"2017-06-29T09:53:00+00:00","og_image":[{"url":"https:\/\/www.ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg","type":"","width":"","height":""}],"author":"Steve West","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Steve West","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/","url":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/","name":"A New Strain of Ransomware is Even More Virulent - IT Services in Virginia","isPartOf":{"@id":"https:\/\/www.ntegrait.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage"},"image":{"@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage"},"thumbnailUrl":"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg","datePublished":"2017-06-29T09:53:00+00:00","dateModified":"2017-06-29T09:53:00+00:00","author":{"@id":"https:\/\/www.ntegrait.com\/#\/schema\/person\/33156c118f002b88019c3fc70441bf79"},"breadcrumb":{"@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#primaryimage","url":"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg","contentUrl":"https:\/\/ntegrait.com\/wp-content\/uploads\/2017\/06\/ThinkstockPhotos-685414404.jpg","width":479,"height":359},{"@type":"BreadcrumbList","@id":"https:\/\/www.ntegrait.com\/a-new-strain-of-ransomware-is-even-more-virulent\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ntegrait.com\/"},{"@type":"ListItem","position":2,"name":"A New Strain of Ransomware is Even More Virulent"}]},{"@type":"WebSite","@id":"https:\/\/www.ntegrait.com\/#website","url":"https:\/\/www.ntegrait.com\/","name":"IT Services in Virginia","description":"Ntegra IT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ntegrait.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.ntegrait.com\/#\/schema\/person\/33156c118f002b88019c3fc70441bf79","name":"Steve West","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ntegrait.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3cc273f166c78aca895198956663df42?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3cc273f166c78aca895198956663df42?s=96&d=mm&r=g","caption":"Steve West"},"description":"Ntegra IT is devoted to providing reliable Computer Support to businesses that want to improve productivity and profitability. We deliver custom designed Network Services that better map to your business, so you can stop worrying about your technology and get back to achieving your business goals.","url":"https:\/\/ntegrait.com\/author\/swestntegrait-com\/"}]}},"_links":{"self":[{"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/posts\/158327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/comments?post=158327"}],"version-history":[{"count":0,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/posts\/158327\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/media\/158328"}],"wp:attachment":[{"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/media?parent=158327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/categories?post=158327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ntegrait.com\/wp-json\/wp\/v2\/tags?post=158327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}