What is the Bad Rabbit ransomware attack, how does the malware work and how can you protect against the virus?

Awadh Jamal (Ajakai)
By -
0
A fresh cyber attack has seen computers go down in Russia, Ukraine, Germany and Turkey which has been blamed on ransomware.

Dubbed "Bad Rabbit," the virus is the latest example of cyber criminals using ransomware to extort cash - here’s everything you need to know.

What is the Bad Rabbit ransomware attack?

It is believed to be behind the trouble and has spread to Russia, Ukraine, Turkey and Germany.

A message will pop up on users' screens telling them their computer had been locked and they must pay £280 in Bitcoin to regain access.

Russia has been hit hardest but computers in Turkey and Germany are also reported to be affected.

How does the malware work?

Bad Rabbit infects a network when one person inadvertently runs a fake Adobe Flash Player installer that has been manipulated to look like the real deal.

After infecting one machine in a network - one computer in an office, for example - Bad Rabbit can find any login details stored on the machine which it uses to spread to others, security researchers have claimed.
Similarly to WannaCry, Bad Rabbit encrypts Windows files, video and audio.

The user receives a message that states: "Oops! Your files have been encrypted.

"If you see this text, your files are no longer accessible."

The malware is locking users out and demanding money cash.

But security experts are warning people not to cough up.

The malware also appears to be using an encryption scheme that prevented analysts from deciphering the malicious code.

It goes by the code-name "Bad Rabbit" but needed to be analysed further.

It’s currently unclear if infected computers can be fully restored.

Yet there are ways to protect yourself from the cyber attack.

How can you protect against the virus?

UK's top cyber sleuths at GCHQ are now telling Brits to install the latest security software patches, back up data and use proper antivirus software services.

Also, ensure that passwords are never re-used across important accounts and also setting up Two-Factor Authentication (also called Two-Step Verification) in the security settings.

Meanwhile the National Crime Agency (NCA) encourages anyone who thinks they may have been subject to online fraud or cyber crime to contact Action Fraud at www.actionfraud.police.uk.

It is a matter for the victim whether to pay the ransom, but the NCA encourages industry and the public not to pay.

Tags:

Post a Comment

0Comments

Post a Comment (0)

#buttons=(Accept !) #days=(20)

Our website uses cookies to enhance your experience. Check Now
Accept !