Protect From WannaCry

In Protect From WannaCry application, we will show to all of you a step by step how to protect yourself from WannaCry Ransomware.

WannaCry also known by the names WannaCrypt WanaCrypt0r 2.0, Wanna Decryptor and other similar names, is a ransomware program targeting Microsoft Windows. In May 2017, a large cyber-attack using it was launched, infecting over 230,000 computers in 99 countries, demanding ransom payments in bitcoin in 28 languages. The attack has been described by Europol as unprecedented in scale.

The attack by WannaCry ransomware affected Telefónica and several other large companies in Spain, as well as parts of Britain's National Health Service (NHS), FedEx and Deutsche Bahn. Other targets in at least 99 countries were also reported to have been attacked around the same time.

WannaCry is believed to use the EternalBlue exploit, which was developed by the U.S. National Security Agency (NSA) to attack computers running Microsoft Windows operating systems. Although a patch to remove the underlying vulnerability had been issued on 14 March 2017, delays in applying security updates left some users vulnerable. Microsoft has taken the unusual step of releasing updates for the unsupported Windows XP and Windows Server 2003 and patches for Windows 8 operating systems.

Several lines of code, with the potential to cease new infections, were found on 12 May. They were activated by a researcher associated with an anti-malware company. The code was initially reported in the media as an intended kill switch; however, some analysts concluded that it was a programming mistake. Later, variants of the attack without the aforementioned lines have been released and all vulnerable systems still have an urgent need to be patched.

On 12 May 2017, WannaCry began affecting computers worldwide. After gaining access to the computers, reportedly via email attachment,[citation needed] then spreading through the local area network (LAN), the ransomware encrypts the computer's hard disk drive, then attempts to exploit the SMB vulnerability to spread to random computers on the Internet via TCP port 445, and "laterally" between computers on the same LAN. As with other modern ransomware, the payload displays a message informing the user that files have been encrypted, and demands a payment of $300 in bitcoin within three days.

The Windows vulnerability is not a zero-day flaw, but one for which Microsoft had made available a security patch on 14 March 2017, nearly two months before the WannaCry ransomware attack. The patch was to the Server Message Block (SMB) protocol used by Windows. Organizations that lacked this security patch were affected for this reason, although there is so far no evidence that any were specifically targeted by the ransomware developers. Any organization still running the older Windows XP[33] were at particularly high risk because, until 13 May, no security patches had been released since April 2014. Following the attack, Microsoft released a security patch for Windows XP.

According to Wired, affected systems by WannaCry ransomware will also have had the DOUBLEPULSAR backdoor installed; this will also need to be removed when systems are decrypted.

The WannaCry ransomware campaign was unprecedented in scale according to Europol. The attack affected many National Health Service hospitals in the UK. On 12 May, some NHS services had to turn away non-critical emergencies, and some ambulances were diverted. In 2016, thousands of computers in 42 separate NHS trusts in England were reported to be still running Windows XP. Nissan Motor Manufacturing UK in Tyne and Wear, one of Europe's most productive car manufacturing plants, halted production after the ransomware infected some of their systems. Renault also stopped production at several sites in an attempt to stop the spread of the ransomware.

Dont forget to rate Protect From Wannacry Ransomware, Thank you.