The massive, global ransomware attack

Last May, a huge cyberattack It struck thousands of computer systems in dozens of countries and affected many network devices in more than 70 countries. ransomware Its objective is not to steal data but to cause a quick hijacking by encrypting the files on the infected computer and then demanding a ransom via Bitcoins, in this case $300. This is distributed with a dropper linked in an email that is not detected by many anti-malware engines.
 
The analyses of the National Cybersecurity Institute (INCIBE) from Spain reported that the malicious software that caused the cyberattack Globally, it's a WanaCrypt0r, a variant of WCry/WannaCry.
This attack was neutralized after Microsoft released a Windows patch.
 

What happens when it's installed on our computer?

 
Once installed on a computer, this virus blocks access to the affected computer's files, demanding a ransom to restore access. WanaCrypt0r encrypts hard drive files with extensions such as .doc, .dot, .tiff, .java, .psd, .docx, .xls, .pps, .txt, or .mpeg, among others, and increases the ransom amount as time passes.
 

What do we do after a cyberattack?

 
Incibe, through the CERT for Security and Industry (CERTSI), offers a free service for analyzing and decrypting files affected by certain types of ransomware. Victims can contact the service via email incidents@certsi.es.
 

Do we pay to recover our files?

 
The National Cybersecurity Institute (INCIBE) recommends against paying the ransom, as there are no guarantees of data recovery and the victim may suffer subsequent attacks. The Institute also points out that this practice fuels the cybercriminals' business, as they may begin demanding higher sums after the initial payment.
 

How do we disinfect the computer?

 
To remove the infection, you can use any updated antivirus or bootable antivirus program. It is recommended to clone the disks beforehand (copy the hard drive data to another storage device), depending on the importance of the affected data.
 
Once again, this attack demonstrates that the ransomware It is a powerful weapon that can be used against consumers and businesses alike.