WannaLocker: Mobile Version of WannaCry is Affecting Android Smartphones in China

WannaCry was the biggest ransomware cyberattack of 2017 which affected 3,00,000 computers worldwide. The WannaCry worm used EternalBlue exploit to enter a Windows PC and takes advantage of the Microsoft's SMB protocol. After taking control over a Windows PC the WannaCry worm starts encrypting the files stored on the hard drive with the help of DoublePulsar. After encrypting the files the virus asks for a ransom which is to be paid within few days. If not paid the files will be deleted forever.

Microsoft released the MS17-010 patch which fixes the SMB vulnerability in Windows 7, Vista and Server 2008. If you have not installed this patch yet then read how to install MS17-010 update. After installing this patch your Windows PC can't be easily exploited by WannaCry. WannaCry spread at a faster rate but it only got a ransom of $82,000 with less than 200 payments. Now after the WannaCry cyberattack, hackers are targeting android smartphones in China with a new android ransomware known as WannaLocker.

The WannaLocker is spreading through Chinese game forums. The ransomware tricks a user by imitating itself as a plugin for the Chinese game King of Glory. When this plugin is downloaded and installed on the targeted android phone then it comes into play. First it hides it app icon from the app drawer and then changes the android home screen wallpaper to an anime image. After this it starts encrypting the files stored on the phone's external storage.

After encrypting the files it asks for ransom which is 40 Chinese Renminbi which equals $5.88 USD. The thing here to note is that the hackers behind WannaLocker are not using any kind of crytocurrency like bitcoins. The ransomware can be paid via QQ, Alipay and WeChat. Since the money sent via these services can be easily tracked then a question arises why the hackers are not using any cryptocurrency. Either they have made a mistake or they are a group of some notorious hackers that want to make quick money.

So if you haven't encountered this ransomware yet on your android smartphone then we suggest you to immediately install Avast Mobile Security. Avast Mobile Security detects and blocks this ransomware. Avast has already blocked the WannaCry ransomware 1 million times in 150 countries. So, it is advisable to keep your device safe by installing Avast Mobile Security.

Source: Avast Blog

Read More

The world is now facing the biggest cyberattack known as the WannaCry ransomware. The WannaCry Ransomware has affected more than 2,00,000 computers worldwide. The WannaCry ransomware targets the computers running the outdated Microsoft Windows operating systems like the Windows XP, Windows Server 2003, Windows 7/8. After getting in a computer this malware first tries to connect to a domain name which is hard coded in its source code. If the domain name is not found then it encrypts the entire hard drive and asks for ransom from the victims. This domain name actually acted as a kill switch and was discovered and registered by Marcus Hutchins of malwaretech. This kill switch greatly reduced the spread of this malware.

Before the WannaCry cyberattack, Microsoft patched the vulnerability in its Windows 10 OS by releasing a critical software update known as MS17-010 in March 2017. At that time MS17-010 was not released for other Windows OS'. After the WannaCry ransomware attack, Microsoft aggressively released security updates for all its Windows operating systems including the Windows XP whose support was ended by Microsoft in April 2014.

The MS17-010 is your computer's first defense to prevent the WannaCry ransomware attack. If you haven't installed this security update then find this post useful as we are going to teach you how to install this patch either via Windows update or standalone update package. Read upgrade to Windows 10 for free.

How to Install MS17-010 (KB4012212) Security Update on Windows 7

• Download the MS17-010 (KB4012212) update package 32-bit | 64-bit
• Download the update package according to the operating system you are using, that is 32-bit or 64-bit.
• After downloading the update package, double click it to open an install.
• Installation may take few minutes.
• Restart your computer after installation.
• To verify the update go to 'Control panel>Windows update'. Click 'Installed Updates' and look for 'KB4012212'. If it is listed then MS17-010 has been successfully installed.

Now after installing the security patch update make sure to scan your PC with a good antivirus. We suggest you buy Avast Internet Security 2017 because it detects, blocks and remove all malware strains of WannaCry ransomware including WNCRY, WCRY and Wana Decryptor 2.0. If you are still using Windows defender then I must tell you that Windows defender is unable to defend your computer against WannaCry. You can install Avast Internet Security 2017 which comes with a 30-day trial. Avast is the only antivirus which provides the highest security against WannaCry and DoublePulsar. Below you can find a screenshot in which Avast antivirus blocked the WannaCry virus.

Download Avast Internet Security 2017

If you have any questions then you can ask via comments. If you liked the article then take two minutes to share it.

Read More