Global ransomware attack causes chaos

Many reports suggest that screens around the world are getting this message, indicating a ransomware attack is to blame.

Many reports suggest that screens around the world are getting this message, indicating a ransomware attack is to blame.

Companies across the globe are reporting that they have been struck by a major ransomware cyber-attack.

British advertising agency WPP is among those to say its IT systems have been disrupted as a consequence.

Ukrainian firms, including the state power company and Kiev’s main airport were among the first to report issues.

The Chernobyl nuclear power plant has also had to monitor radiation levels manually after its Windows-based sensors were shut down.

Experts suggest the malware is taking advantage of the same weaknesses used by the Wannacry attack last month.

“It appears to be a variant of a piece of ransomware that emerged last year,” said computer scientist Prof Alan Woodward.

“It was updated earlier in 2017 by the criminals when certain aspects were defeated. The ransomware was called Petya and the updated version Petrwrap.”

Andrei Barysevich, a spokesman for security firm Recorded Future, told the BBC that it had seen the malware for sale on many forums over the last 12 months.

“It only costs $28 (£22) on the forums,” he said. “But we are not sure if they used the latest version or a new variant of it.

Mr Barysevich said the attacks would not stop because cyber-thieves found them too lucrative.

“A South Korean hosting firm just paid $1m to get their data back and that’s a huge incentive,” he said. “It’s the biggest incentive you could offer to a cyber-criminal.”

A bitcoin wallet associated with the outbreak has received several payments since the outbreak began. The wallet currently holds 1.5 bitcoins – equivalent to $3,500.

Network down

Others reporting problems include the Ukrainian central bank, the aircraft manufacturer Antonov, and two postal services.

Russian oil producer Rosneft and Danish shipping company Maersk also say they face disruption, including its offices in the UK and Ireland.

“We can confirm that Maersk IT systems are down across multiple sites and business units due to a cyber-attack,” the Copenhagen-headquartered firm said via Twitter.

“We continue to assess the situation. The safety of our employees, our operations and customers’ business is our top priority.”

Spanish media reports that the offices of large multinationals such as food giant Mondelez and legal firm DLA Piper have suffered attacks.

And French construction materials company St Gobain has said that it had fallen victim.

The attacks come two months after another global ransomware assault, known as Wannacry, which caused major problems for the UK’s National Health Service.

BBC

Leave a Reply

Your email address will not be published. Required fields are marked *

*