WanaCry victims here?

[Bill_Bright]

Speaking of the Department of Homeland Security's US-Computer Emergency Response Team (from my previous post), just got this today too:

Alert (TA17-132A), Indicators Associated With WannaCry Ransomware

 

[revin]

Dang Update keeps getting stuck "creating restore point" !!! for some of the 5-13 updates

 

[Ahhzz]

....

Actually, the best way to defeat it is to prevent in the first place. And for Windows users, that is easy with 3 simple steps:

1. Use a current version of Windows.
2. Keep Windows fully updated.
3. Use a fully updated antimalware solution (and MSE on W7, or WD on W8/W10 are fine for that).​

Okay, 4 steps.

4. Don't be "click happy" on unsolicited links, attachments, downloads, and pop-ups.​

Of course, that does not negate the need for a current backup. If you are defeated by this malware by failing to follow those three easy steps, having a current backup may be your only recourse, because frankly, I would not trust the bad guys to give you the unlock key once you pay the ransom.

I disagree - at least for Windows. It is not an ordeal at all! The paranoid just think it is! But all that is needed is to just leave Windows alone (don't change the defaults) and it will keep itself updated. Piece of cake!

Speaking of "Naive and silly". To think that just because M$ has patches does not mean it is secure by any stretch. This vulnerability was patched 2 months ago, that's true. But the vulnerability, as well as dozens of others, have been there for years, as indicated by the fact that Windows 7 is affected by this attack. So, believing that simply keeping Windows updated, or even adding an Antivirus to the mix, is absolutely naive.

 

[Divide Overflow]

FedEx is reportedly afflicted. Seems to be hitting improperly secured VMs pretty hard too.

Gotta be careful with your backups. If your backup data is also infected a simple wipe / restore can be tricky.

 

[alucasa]

FedEx is reportedly hit. Seems to be hitting improperly secured VMs pretty hard too.

Oh, the irony...

 

[Drone]

Because of that Microsoft released a patch even for Windows XP SP3 lol

Yeah Windows XP

download KB 4012598

 

[Bill_Bright]

So, believing that simply keeping Windows updated, or even adding an Antivirus to the mix, is absolutely naive.

Please don't read in to what was said, something not said! And please twist words around. That is not cool. I never said keeping Windows updated is the panacea for all malware. My comment was in reply to comments about this specific threat. And it is true, the steps I said prevents THIS threat.

But to your comments about being naive, it is also true that keeping our operating systems current is indeed, one of the best ways to prevent infections. But because there are such things as zero day exploits, keeping our systems updated is still not a guarantee. You still must not be click-happy, and must use a decent anti-malware solution that uses behavior analysis to detect and block suspicious behavior.

So IMO, your attempt to discredit what I said by suggesting things not said, and twisting comments around was naive and silly. And because everyone knows that keeping our systems current is a proven method to "help" (notice I did not say "guarantee") prevent malware infections, suggesting otherwise was not helpful to the discussion.

 

[64K]

Linux might not be considered so secure if it had the install base that Windows has. Maleware authors will target the largest install base for their work to target the most amount of people as possible. I wonder what kind of a royal clusterfuck it would be for Linux users if their OS had an installed base the size of Windows and also being an open sourced OS as well.

 

[Bill_Bright]

The size of the target is sure a factor. But make no mistake. Linux has vulnerabilities too - and malware to exploit them.

Why Linux users should worry about malware and what they can do about it.

And unprotected Linux boxes can be used to attack your family and friends who are running unprotected Windows systems too.

 

[DeathtoGnomes]

So, believing that simply keeping Windows updated, or even adding an Antivirus to the mix, is absolutely naive.

I totally agree, there are too many people that just want to "set it and forget", the same people that dont understand why they have to pay and the same people that never understand how their identity was stolen.

Most people trust M$ implicitly, dont realize that most of these threats is M$ fault for shoddy and weak programming, coupled with the lack of timely fixes of already known threats and exploits. There is history with M$ disregarding potential threats and exploits (prolly in favor of the USGov using them to spy on its citizens. ), and that begs the question, how long ago could this threat have been fixed before it actually became a thing? Now that it is a thing, we point at each other and say "You're naive cuz you got ha'kt!" all the while still trusting M$ to 100% protect us.

It does us no good arguing who or what is naive when it comes to M$ and windows, as technically minded people we can predict who the victims will be and some of us will even sit back and laugh while being asked "can you fix this?". Get your evil on!

 

[Bill_Bright]

Most people trust M$ implicitly, dont realize that most of these threats is M$ fault for shoddy and weak programming

Yeah right. Because everybody knows shoddy and weak programming is how a tiny software development company becomes and stays one of the top 10 tech companies in the world.

This is just typical and biased Microsoft bashing. Don't blame the bad guy for perpetrating the crime. No! That would be silly. And don't blame the user for failing to keep his or her computer updated when updates are available to stop the bad guy. No! That would naive. So of course, blame Microsoft for the actions of the bad guys. Sure. That makes perfect sense.

 

[bogmali]

Well thread derailed once again by the usual suspects......Closing up shop