WanaCry victims here?

[lorraine walsh]

I have read and heard that a lot of people have become the victim of this shitty ransomware. So, are there any here? Also, is there any known way to prevent it beforehand?

 

[P4-630]

I have read and heard that a lot of people have become the victim of this shitty ransomware. So, are there any here? Also, is there any known way to prevent it beforehand?

On a Dutch tech site I read that they target mostly larger networks.

 

[Ferrum Master]

Never had any sort of infection for years...

Use Linux, or don't do stupid browsing in gray areas.

 

[Ahhzz]

I have read and heard that a lot of people have become the victim of this shitty ransomware. So, are there any here? Also, is there any known way to prevent it beforehand?

install the security patch Microsoft released for it two months ago.

**edit: I downloaded it to have at work yesterday for myself and clients, but this morning the M$ site seems to be having some issues, sorry. Looking for an alternative download option.

 

[P4-630]

I know someone who got his files encryted by some ransomware, as far as I know he used torrent and was not a stranger to use cracks for software.
In the end he paid for it and his files were decrypted.

 

[Caring1]

Never had it myself, but the best way to defeat it is have current back ups.
If you get infected, wipe your drive and reinstall.

 

[P4-630]

For simple safer browsing use Google DNS.

 

[StefanM]

'Accidental hero' finds kill switch to stop spread of ransomware cyber-attack

 

[lorraine walsh]

install the security patch Microsoft released for it two months ago.

**edit: I downloaded it to have at work yesterday for myself and clients, but this morning the M$ site seems to be having some issues, sorry. Looking for an alternative download option.

Yeah it is installed at my end. that can be the reason why I am safe!

App

Never had it myself, but the best way to defeat it is have current back ups.
If you get infected, wipe your drive and reinstall.

apparently that is the only way out if you don't wanna pay

 

[Ahhzz]

If anyone still has issues getting the patch, and trusts me, send me a PM, and I'll drop you a Dropbox link for the Win7SP1 file. I have the 32 and 64 bit versions. If you don't trust, the site will come up eventually, you just have to keep hitting each page when it fails, until you get to the next step (3 from the link I sent to get to a final download).

 

[Derek12]

Spain was badly hit but no infected computers where I work or my own ones

 

[P4-630]

https://www.nomoreransom.org/website-disclaimer.html

Decryption tools for various versions ransomware:
https://www.nomoreransom.org/decryption-tools.html

 

[lorraine walsh]

Guys anyone tried to contact them via the decryptor? Or any article about that?

 

[droopyRO]

It seems they are mostly targeting large networks not individual PCs. In Romania a part of the Dacia(Renault)car factory just went offline a few hours ago acording to the media.

 

[Aquinus]

Use Linux

Challenge accepted... oh wait.

 

[Derek12]

Never had any sort of infection for years...

Use Linux, or don't do stupid browsing in gray areas.

Because Linux doesn't have any security holes

 

[FireFox]

Also, is there any known way to prevent it beforehand?

Yeap, don't use Internet, easy.

 

[P4-630]

Yeap, don't use Internet, easy.

Duh...

At least use Google DNS then.

 

[Aquinus]

Because Linux doesn't have any security holes

It's better for a few reasons.

1. It's not typically the low hanging fruit.
2. The number of potential users to hack is smaller than Windows or OS X.
3. It's also likely that holes will be found and patched faster when more people are looking at the source.

All in all, it's not because it's 100% secure, it's because Windows is a more tempting target if you consider number of users, just as Android is becoming a target because of the number of users/devices.

 

[Derek12]

It's better for a few reasons.

1. It's not typically the low hanging fruit.
2. The number of potential users to hack is smaller than Windows or OS X.
3. It's also likely that holes will be found and patched faster when more people are looking at the source.

All in all, it's not because it's 100% secure, it's because Windows is a more tempting target if you consider number of users, just as Android is becoming a target because of the number of users/devices.

But AFAIK (anyone correct me if wrong) this hack happened by not applying a Windows update/patch issued 2 months ago. The same could happen with Linux.
About Android, it was insecure since it was created. In many cases but not always, security is inversely proportional to openness.

 

[Aquinus]

But AFAIK (anyone correct me if wrong) this hack happened by not applying a Windows update issued 2 months ago. The same could happen with Linux.
About Android, it was insecure since it was created. In many cases but not always, security is inversely proportional to openness.

Actually, wide use is definitely linked to higher risk of attack. That doesn't change how secure it is but, it alters the chances that a hole will be found. Software more widely used that is secure can very well have a higher chance of a security hole being found simply by the fact that more people are trying to find a hole. Fewer people looking for holes in less secure software could even have a better chance of not being compromised because a lot fewer people are trying. So, it's not really just a factor of if something is more secure or not. You're right though, if a hole is found and people don't update, you're a prime candidate to be hacked however, the same logic applies in the sense that a vulerability is only as bad as the people trying to exploit it.

So, while I agree that it's a software thing, I would argue that it's also a people thing and that more people using something can, by itself, make software less secure.

 

[DeathtoGnomes]

7 Easy Steps to Protect Yourself
Currently, there is no WannaCry decryption tool or any other solution available, so users are strongly advised to follow prevention measures in order to protect themselves.

• Keep your system Up-to-date: First of all, if you are using supported, but older versions of Windows operating system, keep your system up to date, or simply upgrade your system to Windows 10.
• Using Unsupported Windows OS? If you are using unsupported versions of Windows, including Windows XP, Vista, Server 2003 or 2008, apply the emergency patch released by Microsoft today.
• Enable Firewall: Enable firewall, and if it is already there, modify your firewall configurations to block access to SMB ports over the network or the Internet. The protocol operates on TCP ports 137, 139, and 445, and over UDP ports 137 and 138.
• Disable SMB: Follow steps described by Microsoft to disable Server Message Block (SMB).
• Keep your Antivirus software up-to-date: Virus definitions have already been updated to protect against this latest threat.
• Backup Regularly: To always have a tight grip on all your important files and documents, keep a good backup routine in place that makes their copies to an external storage device that is not always connected to your PC.
• Beware of Phishing: Always be suspicious of uninvited documents sent an email and never click on links inside those documents unless verifying the source.

(fixed links too)
Snipped from https://thehackernews.com/2017/05/wannacry-ransomware-windows.html

 

[alucasa]

In general, keeping OS up-to-date prevents a lot of nasty stuff but nowadays, for some, keeping any OS, let it be Windows or Ubuntu or any other OS, is an ordeal due to paranoia.

Both Windows and Unix let you know when an update is available. Windows forces you to install them at one point which some turn it off by force. Unix let you know but doesn't force it.

P.S. UK's NHS (National health service) was hit by ransomware yesterday. Majority of their networks went down, preventing surgeries and whatnot. The media claim it's an attack but I bet some dude opened a suspicious e-mail attachment.

 

[Bill_Bright]

Because Linux doesn't have any security holes

That, of course is naive and silly. Of course Linux has security holes and new ones are being discovered all the time. Those who don't believe that are not paying attention! I recommend anyone concerned about security (and that should be everyone) to sign up for the Department of Homeland Security's US-CERT Cyber Security Bulletin Vulnerability Summaries. There you will see that Linux, MacOS, security apps, YOUR favorite browser, and all sorts of other programs have new vulnerabilities being discovered all the time. Critical ones too!

Note the Vulnerability Summary for the week of April 24, 2017, Linux had 11 High Vulnerabilities.

but the best way to defeat it is have current back ups.

Actually, the best way to defeat it is to prevent in the first place. And for Windows users, that is easy with 3 simple steps:

1. Use a current version of Windows.
2. Keep Windows fully updated.
3. Use a fully updated antimalware solution (and MSE on W7, or WD on W8/W10 are fine for that).​

Okay, 4 steps.

4. Don't be "click happy" on unsolicited links, attachments, downloads, and pop-ups.​

Of course, that does not negate the need for a current backup. If you are defeated by this malware by failing to follow those three easy steps, having a current backup may be your only recourse, because frankly, I would not trust the bad guys to give you the unlock key once you pay the ransom.

keeping OS up-to-date prevents a lot of nasty stuff but nowadays, for some, keeping any OS, let it be Windows or Ubuntu or any other OS, is an ordeal due to paranoia.

I disagree - at least for Windows. It is not an ordeal at all! The paranoid just think it is! But all that is needed is to just leave Windows alone (don't change the defaults) and it will keep itself updated. Piece of cake!

 

[Vya Domus]

Just keep important stuff in multiple places , that's what I do. I know that by doing this you technically increase your chances of getting into this situation but at the same time it lowers the chance you lose all of your stuff greatly.