Contact us today!
(518) 203-2110

Evolve IT

Evolve IT has been serving the Saratoga Springs area since 1995, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Latest Ransomware Attack is Brutal Reminder of Cyber Security Importance

Latest Ransomware Attack is Brutal Reminder of Cyber Security Importance

A new malware swept across the globe Tuesday, incorporating facets of many ransomwares that have made headlines recently. While it originally appeared to be a variant of the Petya ransomware, it has been determined that it shares more in common with WannaCry. However, “NotPetya,” as it has been named, has a few additional features that experts say make it worse than either of its predecessors.


Why NotPetya Isn’t Really a Ransomware
The first clue that researchers had that NotPetya had a different motivation was the fact that the ransom only demanded the Bitcoin equivalent of $300. Secondly, the only means of getting the decryption key was to send an email to an address hosted by German email provider Posteo. Despite the lack of preparation the payment method appeared to have, NotPetya itself was clearly designed to be able to infiltrate as many networks as possible and do maximum damage once inside.

A Hybrid Hacking Attack
Since the attack commenced, researchers have ascertained that despite its initial similarities with Petya, NotPetya shares many traits with other malicious programs. Like WannaCry, the attack that affected much of Europe, NotPetya leverages EternalBlue. EternalBlue is a National Security Agency hacking tool that targets unpatched systems and steals the passwords that allow administrator access. In addition to EternalBlue, NotPetya also utilizes EternalRomance, another code that was stolen from the NSA.

Once NotPetya has infected one computer, it extracts passwords from its memory or the local filesystem to allow itself to spread--including onto updated and patched Windows 10 systems.

How To Protect Your Files
First off, don’t expect that you can retrieve your files just by paying the ransom. Even if those responsible for NotPetya intended to keep their word and return them once paid, Posteo has shut down the provided email account victims were to receive their keys from. As a result, unless a victim was already following certain best practices, their files are as of yet unrecoverable.

However, this does not mean that everyone is vulnerable to this attack. Before the EternalBlue and EternalRomance exploits were distributed on the dark web, Microsoft had already released patches for the vulnerabilities. However, if these patches were not applied, a user’s systems were (and are) still vulnerable.

The best method to avoid infection from this kind of attack is to ensure your users understand the importance of cyber security efforts, and that all of your business’ systems are reinforced against the latest threats by keeping your defenses up-to-date.

Furthermore, even an infected user is not without hope if they have been backing up their files. If they have done so, all they have to do is disconnect their computer from the Internet, reformat their hard drive and restore their data from their backup solution. However, for this to work, you have to also be sure that your backups are up-to-date, and that your backup is stored in an isolated location, separate from your network.

Evolve IT has the experience and expertise to help prevent you from becoming a victim of a malware like this, whether we help you manage your backups or help educate your users to avoid attacks like these in the first place. Give us a call at (518) 203-2110 today.

Comments

 
No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Tuesday, 01 April 2025
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Blog Archive

Free Consultation

Sign up today for a
FREE Network Consultation

How secure is your IT infrastructure?
Let us evaluate it for free!

Sign up!

Free Consultation
 

Tag Cloud

Tip of the Week Security Technology Internet Best Practices Cloud Hackers Privacy Email Productivity Malware Business Business Computing Software User Tips Google Hosted Solutions Computer Microsoft Upgrade Efficiency Workplace Tips Innovation Smartphone Windows 10 IT Support Mobile Devices Gmail Network Security Ransomware Hardware Business Continuity Operating System Disaster Recovery Communication Hacking WiFi The Internet of Things Social Media Facebook Bandwidth Microsoft Office Office Backup Apps Website Smartphones Wireless Technology Android Apple Employer-Employee Relationship History Two-factor Authentication Best Practice Small Business Alert Phishing App Networking Data storage Mobile Computing Data Big Data Windows communications Safety Experience Unified Threat Management Quick Tips Money Mobile Device Management Network Firewall Content Filtering Managed Service Provider Outlook Cybercrime Hosted Solution Windows XP IT Services Competition Documents Artificial Intelligence Tech Support Presentation Compliance Entrepreneur Drones Domains Social Printer Hacker Browser Retail Virtual Desktop Wireless Application Securty Unified Communications Document Management Customer Service Encryption Managed IT services Law Enforcement SaaS VoIP Proactive IT Router Cortana Bluetooth Network Congestion Office 365 Automation Save Money Music Analytics Memory Saving Money intranet Lithium-ion battery Laptop Deep Learning Cryptocurrency IBM BDR Social Networking Google Docs Education Public Speaking Holiday Vendor Management Cleaning Black Market IP Address YouTube Virtualization Processors Office Tips LiFi Staffing Downtime Government Monitors BYOD Passwords Augmented Reality Streaming Media Keyboard Help Desk Micrsooft Search Visible Light Communication User Disaster Hard Drives Displays Business Growth Remote Computing Data Management Shortcut Robot DDoS Advertising Recovery Society Heating/Cooling Sports Word End of Support Google Wallet Spam Running Cable Information Technology Windows 8 Internet of Things Business Management Writing
QR-Code