No ransomware attack reported yet: IT ministry -Governance Now

No ransomware attack reported yet: IT ministry

Wannacry encrypts hard disk drive of computers and demands $300 in bitcoins to decrypt

GN Bureau | May 13, 2017

#bitcoins #Kaspersky Lab #Quick Heal #Symantec #malicious IP addresses #MEIT #Wannacry

A day after a global cyber ransomware attack, the Indian computer emergency response team of the ministry of electronics and information technology has advised organisations to apply patches to Windows systems. The details of patches, as stated in Microsoft security bulletin MS 17-010, are publicly available.

Ransomware malware is malicious software which, when in contact with a computer or network, encrypts computers hard disk drive and locks the user and demands for a ransom for decryption. In this case, ‘wannacry’ has demanded $300 in bitcoins. Reports claim that the attack seems to taken place across 99 countries—the figure is approximate. European countries, however, are the worst hit.

“It has been reported that a new ransomware named Wannacry is spreading widely. Wannacry encrypts the files on the infected Windows systems. This ransomware spreads by using vulnerability in implementation of Server Message Block (SMB) in Windows systems. This exploit is named as ‘Eternalblue’,” said an advisory on ‘cert-in-org.in’.

The cyber hack tool seems to have been stolen from National Security Agency of the US.

“On May 12, 2017… ransomware began spreading widely impacting a large number of organizations, particularly in Europe,” US based security solutions company Symantec said on its portal. WannaCry, the cyber security firm said, has the ability to spread itself within corporate networks, by exploiting a known vulnerability in Microsoft Windows. “Computers which do not have the latest Windows security updates applied are at risk of infection,” Symantec said.

According to officials at the electronics and IT ministry, so far no ‘wannacry’ cases have been reported. The government organisation is working on developing a ‘removal tool’ to detect the malware and clean the system with Quick Heal, and would soon be making it available on cyberswachhtakendra.gov.in portal.

ICERT, the officials said, is also sharing a list of malicious IP addresses with all government organisations and facilities declared as ‘critical information infrastructure’. Microsoft had released a patch mid-March for the Windows vulnerability being currently exploited by ‘wannacry’. Subsequently, ICERT had advised organisations to upgrade the Windows software with the given patch.

It is understood that it’s not a targeted attack. “Ransomware campaigns are typically indiscriminate,” Symantec believes.

Kaspersky Lab, a Russian cyber security solutions provider, have found 45,000 ‘wannacry’ cases across countries including the UK, Russia, Ukraine, India, China, Italy, and Egypt. “In Spain, major companies including telecommunications firm Telefónica were infected. By Friday evening, the ransomware had spread to the United States and South America, though Europe and Russia remained the hardest hit, according to security researchers Malware Hunter Team. The Russian interior ministry says about 1,000 computers have been affected,” a Guardian report said.

For remedial measures refer here

Comments

Other News

Climate actions being implemented to deal with impact of heat waves

India’s climate actions cut across various sectors and are being implemented through various programs and schemes of different union ministries, departments and state/ union territory governments. The government of India through concerned ministries and departments organises workshops, exhibiti

Banks must hear borrowers before declaring their accounts as frauds: SC

In a judgment with far-reaching implications, the Supreme Court has held that the civil consequences of an account being declared as fraud under the Reserve Bank of India (Frauds Classification and Reporting by Commercial Banks and Select FIs) Directions, 2016 or its Master Directions on Fraud amount to ci

India’s forest cover increases by 5,516 sq km in four years

The Dehradun-based Forest Survey of India (FSI), an organization under the Ministry of Environment, Forests and Climate Change, carries out the assessment of forest cover biennially since 1987 and the findings are published in the India State of Forest Report (ISFR). As per the latest ISFR 2021, there is a

Steps taken to meet higher power demand of April-May

While the average growth of energy requirement in the country for 2023-24 viz-a-viz 2022-23 has been estimated as 4.9%, the months of April and May have been projected as high demand period. During the current year, the peak demand is expected to be around 229 GW during the summer period. The government ha

Millets to make comeback in army ration after half a century

As the UN has declared 2023 as the International Year of Millets, the Indian Army has steered introduction of millets flour in the rations of soldiers. This landmark decision will ensure troops are supplied with native and traditional grains after over half a century, when these were discontinued in favour

Central Bank Digital Currency has game-changing potential

When discussing digital currency, you might think of one or two well-known varieties. There is the digital representation of currency that you access with mobile and online banking services. This currency is the liability of a commercial bank. There is also cryptocurrency, a digital medium of exchange issu