Recently across the globe approximately 72 countries were hit by the malware called Ransomware. In this article I will try and tell the what happens and how you can prevent your system (if your system is still safe). What is it: WannaCry/WannaCrypt encrypts the files on the Windows system, it has 2 key components - a worm and a ransom package. It spreads through malicious email attachments. It spreads between computers on the LAN (Local Area Network) using SMB ( Server Message Block) in Windows Systems What it does: The ransomware targets all the major file extensions e.g. ppt, pptx, xls, xlsx, doc, docx, swf, fla, m3u, mid, vdi, sldm, dotx, dotm, docm, docb, mp4, 3gp, mkv, flv, zip, rar, tar, etc It also appends .WCRY to the end of the filename. It attacks all common office used extension as well as developer extensions. The Ransomware attacks and creates/drops files in the "ProgramData" folder on your computer with the filename "tasksche.exe...
Comments