How to defend your computer against the ransomware attack

[Equinox Moon]

Source: The Guardian

Friday’s ransomware outbreak, which used recently revealed weaknesses in Microsoft’s Windows operating system to spread further and faster than any before, has prompted the Redmond-based developer to break its own rules on software maintenance in an effort to keep users safe.

The ransomware, also known as “WanaCryt0r”, “WeCry”, “WanaCrypt” or “WeCrypt0r”, used a vulnerability in a Windows Server component to spread within corporate networks. The weakness was first revealed to the world as part of a massive dump of software vulnerabilities discovered by the NSA and then stolen by a group of hackers calling themselves “Shadow Brokers”.

How to defend against the ransomware

--- The vulnerability does not exist within Windows 10, the latest version of the software, but is present in all versions of Windows prior to that, dating back to Windows XP.
--- As a result of Microsoft’s first patch, users of Windows Vista, Windows 7, and Windows 8.1 can easily protect themselves against the main route of infection by running Windows Update on their systems. In fact, fully updated systems were largely protected from WanaCrypt0r even before Friday, with many of those infected having chosen to delay installing the security updates.
--- Users of Windows XP, Windows Server 2003 and Windows 8 can defend against the ransomware by downloading the new patch from Windows.

Read more: https://www.theguardian.com/technology/2017/may/15/windows-xp-patch-wannacry-ransomware-wecry-wanacrypt0r

[bucolic_frolic]

1. Don't understand how this article is accurate

Vista is no longer updated as of April, no?

[unc70]

2. Microsoft has produced updates for older systems

The severity of these threats has led to MS producing special updates for out-of-support systems going back to XT. These patches can be downloaded for free.

[bucolic_frolic]

5. That is true

It took awhile to find the link, but did find one for XP. Vista PCs were updated
and patched in the last update in March

[JohnnyRingo]

21. I too run XP

I thought I should mention it because I feel a camaraderie with someone else hopelessly out of date. I don't want to learn a new system.

I dread reinstalling my flight sims and assorted programs.

[Sucha NastyWoman]

3. So if I am running Windows 10, I have nothing to worry about?

[dalton99a]

14. Yes, if it's been updated

[cstanleytech]

16. It's not an issue of worrying rather it's more of an issue of being sensible and proactive

no matter what operating system you use as there are things everyone can do to help diminish the risks.
For example making sure that all antivirus software is up to date and making sure the latest patches and versions for your operating system and your browser are installed.
If you are like me you also install other security measures like for example I use chrome browser but I run 2 extensions for security, one blocks any JavaScript on a page for a site unless I authorize it to run the other blocks popups.

[Bernardo de La Paz]

4. Always always always have three copies of all files.

Ideally one in the computer, one offline in a cupboard, and one off-site, such as in a bank safe deposit box or with a trusted friend. A bank vault safe deposit box will likely protect against EMP (heaven forbid). Cycle the backup drives about once every month or two, not much more. If you can afford to lose two months of your life, fine. If you are doing important client work from home, maybe cycle the backups once a week.

The offsite one protects against fire and theft, and also against errors when trying to restore in a rush from the one in the cupboard. People have been known to reformat the backup drive instead of the target by error. Another error is to connect a backup drive to an infected computer and find the backup is encrypted as soon as you do.

Back up your cell phone regularly to your computer so that information, contacts, and imagery gets onto the three-copy group.

[Heddi]

9. A 1 TB external hard drive is less than $100 on Amazon

Use that for routine backups of computer docs -- I have 2, actually. A backup of a backup. Also have docs on a cloud -- important things like photos, music, documents. Have CD backups as well. The external HD's are inexpensive and invaluable, imo, and can be formatted to be accessed by both Mac & windows (I have a mac, husband has windows)

[dalton99a]

15. 1TB has dropped to $59 in stores

like Best Buy

[klook]

19. Great advice.

Just having local backups onsite is a big step forward. In my experience, most home computer users don't even do that. All it takes is one virus, drive failure, or accidental file deletion / corruption to make one a true believer.

Offsite backups done on a regular schedule, as well as a bootable copy of your operating system on a thumb drive or other backup drive, should be part of the equation. And of course, you want to test your recovery plan every few months to make sure you're ok in case of (most) disaster(s).

I also use a cloud backup service for purchased music recordings. I've shied away from the cloud for sensitive personal files, but that's potentially an option if you encrypt the files locally before backing up.

[AllaN01Bear]

6. one thing i learned a long time ago,,

was to back up everything. update your os , espicially if you use micro$oft. keep your original install discs in a safe location. i worked at a old bank which is no longer here ( united california bank)they backed up daily. weekly, monthly and yearly. we sent our data via oldsyle reel to reel tapes to a outside location that was nearly nuke proof. and tapes came back daily and we had to archive them. so its best to proctect your computer by doing it.
i understood that one place that was hijacked ( the dem caucus whose computers were hijacked are going to perform a complete reinstall.

[47of74]

7. Backups are a good idea regardless of the OS used

They saved me more than once.

[MattP]

8. Seriously thinking about linux

[turbinetree]

12. Or TOR download software

[d_r]

13. take a look at xubuntu

https://xubuntu.org/tour/

[FigTree]

23. You won't regret it.

About 10 years off windows and not a single problem. Not even talking about malwares and such.

[marked50]

10. Very important to make sure

that you physically remove/disconnect any "back-up"device you use after the back-up.

[Sunlei]

11. MS quickly made a free patch, download it. IMO the ransomware was created from MS own 'ransomware'.

[jpak]

17. My 16 Y.O. cat downloaded Windows 10 for me - against my wishes

Thank you kitty!

[question everything]

18. Or.. you can use Mac... (nt)

[haele]

20. The only difference between Mac and Windows vulnerabilities is in Market Share.

Because Windows cornered the business/government market with a less proprietary platform that allows more program integration with other developers, more viruses are written for Windows than Mac.
There's no real difference in the actual safety controls and protection from hackers other than that.

DoD Cyber security validators regularly run Pen tests and controls validation on both Windows and Mac OS - there's no functional software or firmware differences, no special "back door" protections or other vulnerability mitigation that would give any Apple product more security than any Windows product. There is, however, an annoyance factor when trying to integrate Mac systems into an overall mission environment that includes legacy platforms and specific required functions that Apple does not currently support - without a crapload more cost to "re-engineer" the legacy or mission critical function to work with a Mac OS than a typical Microsoft supported system would cost. Microsoft also integrates more easily with a Linux system during the development phases of a system acquisition.

Taking away the market share - the amount of systems using the products, an Apple product is no more secure than a Windows product.

Haele

[LanternWaste]

22. And Coke drinkers can savor Pepsi.

And Coke drinkers can savor Pepsi. And Ford drivers can ride in a Chevy.

And we can all praise our tin gods and sacred cows pretending to merely be consumer goods.