admin
Several businesses in Zimbabwe, mainly financial institutions, have recently fallen victim to the WannaCry virus that encrypts windows servers and laptops, restricting access to legitimate users.
The virus, a worm based ransomware is a global attack affecting all continents and all computers with Russia, Ukraine being the top targets.
The virus which was first recorded on May 12, 2017 affected over 230 000 computers within a day and its origins remain a mystery.
It is difficult to detect as ransomware uses several evasion tactics that keep it hidden in order for it to have time to copy information from the targets computer.
After an attack, the only way to regain access to computer files is after paying a ransom.
The Cyber Security team at telecommunications service provider TelOne has observed that anyone with a Microsoft machine may be at risk as the virus targets and affects Windows Vista, Windows 7,8 ,10 XP and versions of windows server software.
Microsoft initially announced the vulnerability on March 14 and recommended users to patch their devices and update their system to the latest version as soon as possible.
“The danger of not protecting devices for businesses and individuals is severe because once inside the system, WannaCry ransomware creates encrypted
copies of specific file types before deleting the original files,” said Initial Mlambo head of Information Systems at TelOne.
“This leaves victims with the encrypted copies which cannot be accessed without a decryption key.”
“We advise all businesses and individuals to install current updates to all computers, avoid opening suspicious emails which might be infected
and implement network protection systems, antiviruses and spam technologies.
“All updates can be done using any of our ADSL packages.”
He reassured businesses that TelOne cloud services at Data Centre were secure with robust antiviruses and firewalls.
What happens when one is attacked:
- When a system is infected, a pop-up window appears with instructions on how to pay a ransom amount of between $300 and $500;
- The pop-up also features two countdown clocks; one showing a three-day deadline before the ransom amount doubles and another showing a deadline of when the target will lose their data forever and;
- Payment is only accepted in bitcoin.
- Practical ways to prevent infection:
- According to Microsoft’s Malware Protection Centre, here are the steps you should take to protect yourself against ransomware:
- Install and use an up-to-date antivirus solution (such as Microsoft Security Essentials);
- Make sure your software is up-to-date;
- Avoid clicking on links or opening attachments or emails from people you don’t know or companies you don’t do business with;
- Ensure you have smart screen (in Internet Explorer) turned on, which helps identify reported phishing and malware websites and helps you make informed decisions about downloads;
- Have a pop-up blocker running on your web browser and;
- Regularly backup your important files.
Peter Tanyanyiwa
Online Reporter