Massive ransomware attack in Spanish institutions

 
 
Institutional
(12/05/2017)

CCN-CERT announced there is a massive ransomware attack which hit Spanish institutions. It is the exploitation of an extremely critic vulnerability in Windows environments (7, 8.1, 10 and 2016 Server), used to hit workstations ciphering archives and asking for ransom with bitcoins.

 
 
Institutional
12/05/2017

CCN-CERT announced there is a massive ransomware attack which hit Spanish institutions. It is the exploitation of an extremely critic vulnerability in Windows environments (7, 8.1, 10 and 2016 Server), used to hit workstations ciphering archives and asking for ransom with bitcoins.

It is recommended not to open any attached file in emails simulating a bill (or similar) to prevent the infection from getting into your computer. Avoid opening mails from the affected companies (such as Telefónica, BBVA or Santander Bank). It is also recommended to avoid connecting the workstations via WiFi to Internet and keep the cable connection within the corporative network.

It is very important to properly update the operative systems, as well as maintaining the corporative antivirus Sophos activity. If the computer looks infected despite taking these measures, please contact PAU.

Further information