A new ransomware has risen and is spreading across Europe like wild fire. This new malware is creating chaos across businesses, from supermarkets to shipping ports, ad agencies and law firms. The new ransomware - code named “NotPateya” - shares some very similar characteristics to a very recent malware “Wannacry”.
NotPateya gets its name from an older malware that caused damage alongside with making money. Even though the two appeared to be very similar, NotPateya seems to be a malware that aims to cripple organizations as the source code used to collect the funds was quickly disintegrated.
Researchers say that the rapidly spreading ransomware is proliferating in part due to two previously leaked NSA hacking tools codenamed EternalBlue and EternalRomance. It is also believed to be using modified versions of a recent NSA public release on GITHUB.
How to Protect yourself
With cyber-attacks becoming more common, it is good to be prepared for such scenarios. The ransomware is spread through suspicious emails containing malicious files or through insecure websites. Similarly to older ransomware Wannacry, it is mostly reliant on users opening infected files.
Steps in keeping your computer protected:
- - Never open emails from unknown email addresses
- - Never download files from an unknown origin
- - Always keep your operating system up to date, always perform security updates
- - Always keep your antivirus programs up to date and allow real time scanning
- - Always keep backups of your files in local and remote locations.
What to do if your computer is infected
In a working environment:
- - Inform your IT department immediately
- - Do not copy any files or folders from infected computer to removable media or other machines
- - Stop access to a local network
- - Stop access to the internet
- - Isolate the infected computer’s hard drive, in some cases exploits are published that allow partial recovery
- - If you have data backed up, format your hard drive and reinstall your operating system.
NotPetya is another example of how vulnerable our computers are to exposure of malicious attacks. Protect yourself against such attacks in the futures. Eurofast can provide cloud based scheduled and encrypted backups to eliminate the effects such attacks may cause in your business. Get in touch with a Eurofast Representative for IT-related queries on security.