The National Cyber Security Centre (NCSC) has published guidance on how to protect IT systems from the ‘WannaCry’ ransomware.
The NCSC also says that its working with affected organisations and partners to investigate and coordinate the response in the UK, following the recent attack that hit the NHS.
From investigations and analysis performed to date, we know that the malware encrypts files, provides the user with a prompt which includes; a ransom demand, a countdown timer and bitcoin wallet to pay the ransom into.
The malware uses the vulnerability MS17-010 to propagate through a network using the SMBv1 protocol. This enables the malware to infect additional devices connected to the same network.
The steps the NCSC advises can be found here.
Related reading
Global cyber attack a ‘wake up call for governments’
Microsoft president launches scathing attack on governments following the WannaCry ransomware attack
Major incident declared after NHS cyber attack (Updated 15/05)
Attack on the NHS seems to be part of a global ransomware campaign that has attacked a number of organisations around the world
Government heads to the top of the Cyber Attack List
New research reveals that cyber attacks on the government sector doubled in 2016
Greater Manchester Police fined for losing interview videos
Greater Manchester Police has been fined £150,000 after three DVDs containing footage of interviews with victims of violent or sexual crimes got lost in the post