Header Ads

Europol Investigates "Unprecedented" Cyberattack Affecting 100 Countries Including India

Screen Shot From Malware Tech Live Map 
The Ransomware attack which currently requires no introduction has spread globally to over 125,000 computers worldwide. 
The consequences of the massive cyber-attack that has affected computer systems around the world continue to account for 'victims' who expand the list of people affected by ransomware and which has affected companies and institutions to the British health system, the The Interior Ministry of Russia, the computer system for German trains, the Renault company in France, the Nissan plant in Sunderland, the Telefónica headquarters in Madrid.

At this time, it is expected that the software has already infected more than 125,000 computers in nearly a hundred countries. The first phases of a cyber-attack that have suffered several Spanish companies have already been mitigated, mainly with the issuance of different notifications and alerts to those affected, according to the National Institute of Cybersecurity (INCIBE), based in León.
Europol, for its part, has confirmed that it is an "attack at an unprecedented level". In an official statement, the European Police Office warned that it would make "a complex international investigation to identify the criminals. The European Center for Cybercrime (EC3) reports that it is already working actively with affected countries "to mitigate the threat and assist victims".

The United Kingdom has been the most affected country

The ransomware used in Friday's cyber attacks encrypts files stored on the computer,  hijacks the data and requires victims to pay about $ 300 - 274 euros - in bitcoins to free them. The attackers took advantage of a vulnerability in Microsoft Corp. software which was fixed in March, according to cyber-security researchers.

The EternalBlue vulnerability, used by the attackers to propagate a ransomware called WannaCry, was leaked in April by the hacker group Shadow Brokers, which has been airing on the Internet tools allegedly used by the National Security Agency (NSA).

Reactions in the United States and the United Kingdom

The United States Government has been cleared that it is prepared to help countries that are victims of the wave of cyber attacks, according to Efe after interviewing a spokesman for the Department of Homeland Security.
A spokesman for the Department of Homeland Security declined to reveal if there are US companies or infrastructures that have been victims of cyber-attacks but said the Washington government is in talks with its international partners and willing to assist anyone who asks. "We are aware of 'Ransomware' information that affects multiple entities in Europe and Asia and we are coordinating with our international cyber partners.

British Interior Minister Amber Rudd reported that the government has recommended hospitals and health centers affected by a cyber-attack "not to pay" the ransom that requires the malicious software to recover their computer systems. The director of the National Cybersecurity Center of the United Kingdom (NCSC), Ciaran Martin, said today that his experts are working "relentlessly" to restore the computer equipment of the public health system affected by a large-scale cyber attack. In this country had to cancel in this country hundreds of operations and interventions planned.

Telefónica, Renault or the German train company, are among those affected

More reactions. The head of the data division Telefonica, ex-hacker Chema Alonso, has ensured that the equipment of a segment of the company infected during the global cyber attack that yesterday disseminated an electronic virus in more than 70 countries "are controlled and are being restored". In an extensive article in his personal blog 'A computer on the evil side', Alonso stresses that the "crisis" generated by cyber attack - which according to estimates by the Russian security company Kaspersky caused more than 45,000 incidents worldwide - has had more media impact on social networks than on the "internal reality" of Telefónica.

The registered cyber-attack also affected the computer system of the German railway company, Deutsche Bahn (DB), although it did not alter rail traffic, company sources have reported. There were "system problems" in various areas as a result of a "Trojan attack" on the DB network, the company said in a statement. This caused technical alterations in the digitized information panels at stations and other passenger warning systems, but did not result in "restrictions on rail traffic," the statement continued. DB works "at full capacity" to remedy these problems, although it is assumed that until Saturday afternoon further disturbances may occur.

Renault has been the first big company in France to confirm that it has suffered the attacks

Renault has also accepted that it has been subject to cyber attacks, making it the first major company or institution in France that admits to having suffered such intrusions in its computer systems, in the wave that is affecting several countries. In addition, the Bank of Russia (BR), the issuing entity, has reported a massive cyber-attack against the country's banks, in addition to the computer systems of the state-owned Railways (RZhD). "We have registered massive shipment to banks of malicious software of first and second type. However, the resources of banking institutions have not been compromised, "said the center for monitoring and response to BR cyber attacks. Security firm Kaspersky reported that Russia had been hit hardest by the cyber-attack that began the day before and hit nearly a hundred countries.

This is all the effect of the WanaCry virus

The WanaCry virus only affects computers that have not applied the Microsoft patch released two months ago, this is a reminder that people and organizations that do not routinely update their machines are vulnerable. While Friday's attack could damage Microsoft's reputation for security, it is likely to be limited, says Sid Parakh, the fund manager at Becker Capital Management, which owns Microsoft stock. "There have been so many high-profile cyber attacks that if there is a solution available, it is the responsibility of the user to download it," he said.
Ransomware usually enters a computer when a person downloads a file that looks like a normal attachment or a web link. A hacker can then activate the malware to freeze the computer, and force people to pay a ransom so that the victims do not lose all their files.

The number of ransomware attacks has been increasing: in 2016 was 50%, according to an April report by Verizon Communications Inc. This type of attacks accounted for 72% of all incidents of malware against the health care sector in 2016, According to Verizon. According to Forbes magazine, this type of attacks only lasts a year are worth about 1 billion dollars.

And, of course, stay on top of the latest consumer and mobile security threats by following us on Twitter, and Like us on Facebook.

No comments

Powered by Blogger.