How to Defend WannaCry Ransomware Attack?

A new ransomware attack called WannaCry (also known as WannaCrypt, Wanna Decryptor) has infected computers since 12 May 2017.  A modified variant without a kill-switch has been created rapidly and massive hit over 200,000 computers worldwide by encrypting the important files for ransom.

The Head of Technical Development of UDomain and cybersecurity expert, Mr. Eric Fan, said, “WannaCry, which is an insanely fast-spreading ransomware malware, can encrypt victim's files within 10 seconds and be barely detected.” He shared useful prevention measures for the WannaCry and advices on ever-changing cyber threats.

 

Prevention Measures

Step 1. Close TCP ports 135-139 and 445 on firewall or broadband router in place

Step 2. Disable SMBv1 service (click here for steps)

Step 3. Perform offline backup 

Step 4. Run Windows Update and install Microsoft Security Bulletin MS17-010 security patch.

 

Long-term Precautions 

1. Invest on robust cybersecurity equipment and services

2. Update computer systems and software frequently

3. Create a corporate culture on cybersecurity (i.e. don’t open unknown URLs, suspicious emails & files; always prepare offline backup)

 

Risks of Cyber Threats

More than 200,000 systems have been infected in over 150 countries around the world in just 4 days. It reveals that there are serious network vulnerabilities ranging from SMEs to government departments.  An alarm of global cyber threat has been raised and it directly affects all enterprises globally.

 

Professional Advices 

For the sake of reducing risks of evolving cyber threats, a top-notched cybersecruity partner can assist you in identifying, monitoring and managing your internet infrastructure.

 

For the latest cybersecurity services, please contact our managed security service experts at (852) 2554 7545 or service@udomain.hk.