Skip to main content

Posts

Showing posts with the label virus

Wannacry (WCRY) ransomware

What is the Wannacry (WCRY) ransomware? Trend Micro is closely monitoring the latest ransomware outbreak that has affected several organizations around the world. This ransomware attack is referred to as WCRY or WannaCry. This ransomware is taking advantage of a recently disclosed Microsoft vulnerability ( MS17-010 – “Eternalblue” ) associated with the Shadow Brokers tools release. After a computer is infected, WannaCry ransomware targets and encrypts 176 file types. Some of the file types WannaCry targets are database files, multimedia and archive files, as well as Microsoft Office documents. In its ransom note, which supports 27 languages, it initially demands US$300 worth of Bitcoins from its victims—an amount that increases incrementally after a certain time limit. The victim is also given seven days before the affected files are deleted. How does it infect computers? WannaCry leverages CVE-2017-0144 , a vulnerability in Microsoft Server Message Block 1.0 (SMBv1), to inf...