Ransomware 2.0 hits India, Europe -Governance Now

Ransomware 2.0 hits India, Europe

It has hit 2,000 targets, including banks, telecom companies, metro railways, airports, power plants, oil plants, pharmaceutical companies and government departments

GN Bureau | June 28, 2017

#Merck #Maersk #Ukraine #Microsoft #Wannacry #Petya #Ransomware #Kaspersky #egov

Barely a month after the global Wannacry cyber hack, a new variant of ransomware malware has locked systems across several European countries and India.

Petya, as cyber researchers call it, uses vulnerability in the Microsoft’s Windows system, and encrypts the computer files. It is understood to have been developed by the National Security Agency of the US, later leaked on the internet—the way it happened in case of Wannacry.

“The WannaCry ransomware virus targeted only specific file extensions while still allowing the operating system access,” the Data Security Council of India (DSCI), said in a statement.

Petya has hit 2,000 targets, including Danish shipping giant Maersk, US pharmaceutical firm Merck and several government and private institutions in Ukraine, reported technology portal Wired.

Ukraine’s deputy prime minister Pavlo Rozenko has tweeted a screen shot of a computer monitor displaying the following message, “One of your disks contains errors and need to be repaired…..Warning: DO NOT TURN OFF YOUR PC! IF YOU ABORT THIS PROCESS, YOU COULD DESTROY ALL YOUR DATA!”

Security solutions firm Kaspersky claims that over 60 percent of the infected systems were in Ukraine and 30 percent in Russian. Incidents have also been reported in Russia, England, US, France, Norway, Israel, Poland, Germany, Italy, Belarus and Lithuania.

“It has affected various business outlets spread across multiple sectors. The affected entities include banks, telecom companies, metro railways, airports, power plants, oil plants, pharmaceutical companies, government departments, logistics companies, food conglomerates, law firms etc. It has also led to shutdown of shipping terminals across the world. A total of 2,000 machines are being reported to be infected by this virus across the world,” the DSCI said.

Reportedly, Indian subsidiaries of UK and Russian based energy and aviation firms were also targeted. “As per a few informal sources, a few banks, insurance companies, law enforcement agencies and a large FMCG organisation have been known to be effected,” the DSCI said. At present, the exact number of infected organisations or ‘targets’ in Indian is not known yet.

Indian computer emergency response team (ICERT), working under the ministry of electronics and IT, has released an advisory cautioning users against Petya ransomware.

Here is what the ICERT recommends:

Apply patches to Windows systems as mentioned in Microsoft security bulletin MS17-010.

Perform regular backups of all critical information to limit the impact of data or system loss and to help expedite the recovery process. Ideally, this data should be kept on a separate device, and back-ups should be stored offline.

Block SMB ports on enterprise edge or perimeter network devices

Don’t open attachments or click on URLs in unsolicited emails, even if they come from people in your list. In cases of genuine URLs, close the email and go to the organisation’s website directly through the browser.

Maintain updated anti-virus software on all systems.

Keep the operating system third party applications (MS Office, browsers, browser Plugins) up-to-date with the latest patches.

Detailed advisory here

Comments

Other News

Not just politics, let`s discuss policies too

Why public policy matters Most days, India`s loudest debates stop at the ballot box. We can name every major leader and recall every campaign slogan. Still, far fewer of us can explain why a widow`s pension is delayed or how a government school`s budget is actually approved. That

When algorithms decide and children die

The images have not left me, of dead and wounded children being carried in the arms of the medics and relatives to the ambulances and hospitals. On February 28, at the start of Operation Epic Fury, cruise missiles struck the Shajareh Tayyebeh school – officially named a girls’ school, in Minab,

The economics of representation: Why women in power matter

India’s democracy has grown in scale, but not quite in balance. Women today are active participants in elections, influencing outcomes in ways that were not as visible earlier. Yet their presence in legislative institutions continues to lag behind. The Nari Shakti Vandan Adhiniyam was meant to addres

India will be powerful, not aggressive: Bhaiyyaji

India is poised to emerge as a global power but will remain rooted in its civilisational ethos of non-aggression and harmony, former RSS General Secretary Suresh `Bhaiyyaji` Joshi has said. He was speaking at the launch of “Rashtrabhav,” a book by Ravindra Sathe

AI: Code, Control, Conquer

India today stands at a critical juncture in the area of artificial intelligence. While the country is among the fastest adopters of AI in the world, it remains heavily reliant on technologies developed elsewhere. This paradox, experts warn, cannot persist if India seeks technological sovereignty.

RBI pauses to assess inflation risks, policy transmission

The Reserve Bank of India (RBI) has begun the new fiscal year with a calibrated pause, keeping the repo rate unchanged at 5.25 per cent in its April Monetary Policy Committee (MPC) meeting. The decision, taken unanimously, reflects a shift from aggressive policy action to cautious observation after a signi