Secure Computing
WannaCry
It is a type of malicious software (specifically, it is a Ransomware) targeting Microsoft Windows.
WannaCry designed to extort money from victims by block the access to data that stored on victim’s computer (by encrypt it) until a ransom is paid.
WannaCry encrypts many file types including (.docx (MS Word), .xlsx (MS Excel), .pptx (MS PowerPoint), .jpeg (Photo), .mpeg (Video) and more), appending “.WCRY” to the end of the file name.
In 12 May 2017, a large cyberattack using WannaCry was launched; while initially popular in Russia, WannaCry infecting over 230,000 computers around world, demanding ransom payments in 28 languages. WannaCry shows to victims a note demanding $300 (in bitcoin) to have their data decrypted.
Check your computer system now
To protect your computer system, do the following:
1. Install the update patch file. First of all, update your Windows against EternalBlue exploit, using the following patch file: technet.microsoft.com/library/security/MS17-010
2. Keep your security software up to date. SAIF has licensed Symantec Endpoint (SEP) from Symantec for campus and home use. Make sure your SEP is running and up-to-date.
  • Be aware of phishing scams. Many ransomware attacks spread when users click on links in suspicious email and provide personal information. Be wary of emails when you do not know the sender, and never open attachments you are not expecting. Report any suspicious emails to helpdesk@saif.sjtu.edu.cn.
  • Never share your password. You should never divulge your password to anyone, and IST will never ask for it. If you think your SAIF NetID has been compromised, visit netid.saif.sjtu.edu.cn to change your password immediately.
  • Be cautious when using thumb drives. Malware can also be spread via thumb drives. Be careful when using a thumb drive that is not your own to share files. You can always send data using our secure Onedrive for Business service.