Ironically Warren Buffet recently stated that “I don’t know that much about cyber, but I do think that’s the number one problem with mankind.” He is right. Cybersecurity is a preeminent threat.
What is being called the largest ransomware attack is being described as a real wakeup call y many cybersecurity experts and government officials. The ransomware disrupted hospital , organizational and company networks that were not well protected and up to date. Low hanging fruit for hackers. It did not turn out to be as lethal as originally feared, but it certainly demonstrated the global vulnerabilities associated with inter-connected networks and devices.
Facts are still being analyzed and disputed but It appeared initially that the cyber-extortion attack was perhaps initiated with a phishing/macro email attack, involving a variant of a ransomware called “WannaCry”, that exploited a Microsoft Windows Flaw. But in forensic reviews there is still no definitive explanation of how the malware propagated or who are the culprits, although some suspect North Korean involvement. What we do know that the ransomware was self-replicating and spread swiftly reaching over 100 countries. In various countries, industry, organizations and government were victimized. The Czech security company Avast stated that they saw 57,000 infections included major hits in Russia, Ukraine and Taiwan. (http://money.cnn.com/2017/05/12/technology/ransomware-attack-nsa-microsoft/) British Prime Minister Theresa May called it “an international attack. Cybersecurity is truly a global threat and problem. (http://www.businessinsider.com/theresa-may-nhs-cyberattack-part-of-international-attack-2017-5)
It is thought that early ransomware spread via email and was propagated via online advertising. The ransomware locks computers and then launches a ransom note in a text file demanding payment. In this case, the ransom was $300 per device. Of particular concern were the attacks on the UK National Health Service. Non-emergency operations were suspended and ambulances were diverted because of the WannyCry attacks. Hospitals are often targets for cyber-attacks because they often use a multitude of devices, systems, and networks allowing for more surface attack areas. Also, They generally to not have adequate security operating budgets.