WannaCry Ransomware Attack


The Wannacry ransomware attack started sweeping through Europe and parts so Asia last Friday.  Attacks have also hit here in the US but in far fewer numbers compared to overseas.  WannaCry’s hackers that are behind this ransomware are using an exploit in Windows called EtenalBlue that was leaked from the National Security Agency (NSA).  Microsoft has known about the vulnerability for about a month.  However, not enough people downloaded the patch making thousands of machines vulnerable to this attack.   So far, the WannaCry attack has affected 150 countries and thousands of PCs.  Once infected the computer displays a lock screen demanding a $300 BitCoin payment in exchange for decrypting the PC’s information.  Officials are urging those affected to not pay the ransom demands.

Malware Tech has a real time map of the areas hit by this ransomware.  Marcus Hutchins of Malware Tech was able to briefly slow the spread of the attack by identifying a kill switch in the code. His details on his experience can be found on his blog. Now it’s only a matter of time until the coders behind WannaCry remove the kill switches in the code completely rendering newer versions even harder to stop.  Cyber security analysts are calling WannaCry a “WMD” of ransomware.  It brings to light how dangerous it can be when the NSA’s information is leaked and made public.  The dangers of the malware went from data security to possibly effecting actual lives when the ransomware locked down systems in hospitals located in the UK.  This forced hospital staff to administer care without access to radiology and blood test results.  It also required them to cancel critical MRI and CT scans for patients.  The ransomware also impacted utilities and government agencies.  It’s the worst case of ransomware we have seen to date and brings to light the dangers of leaked classified information and how it can be used maliciously.  The dangers and implications of cyber security threats like these spread as quickly as a real life pandemic virus and we should all be made aware of our own cyber security.

WannaCry is also being called WannaCrypt, Wana Decryptor or WCry.  The unfortunate success of this ransomware attack is already inspiring copycats.  WannaCry makes it easy for these copycats by having a generator that allows you to customize the appearance and script of the lock screen that displays the ransom.  So far the known copycats are DarkoderCrypt0r, Aran wanaCrypt0r 2.0 Generator v1.0, WannaCrypt 4.0 and Wana Decrypt0r 2.0.

Home users should ensure their antivirus and Windows OS are up to date in addition to regular backups and adhering to safe internet browsing practices. If you suspect your device has been infected disconnect from your WiFi immediately to prevent the spread to other connected home devices.  There is currently no fix available for WannaCry.  Antivirus and cybersecurity companies are hard at work seeking ways to decrypt the files of those infected, but there are no verified working third party decryptions available now.

If you have any concerns about WannaCry’s impact on your business network, please reach out to us to discuss it in further detail.  We can assure that Midwest MSP is up to date on all the latest security patches and values your network’s privacy and security.

Referrals Blue Marker

Midwest IT Referral Program!

An overview of the new referral program offered by Midwest IT. You and a friend can now win $100 Amazon gift cards!

We are looking for REFERRALS. And you can help us grow our family! Midwest IT was founded in 2005 and is known for it’s LEGENDARY CUSTOMER SERVICE! And we are looking to add a few customers TO GROW OUR FAMILY. Referral Requirements: Must have at least 15 users, already uses outsourced IT, and you must want a $100 Amazon card! And all you need to do is: WHAT YOU DO: You send an email to Midwest IT and the person you are referring! Midwest IT schedules an on site appointment with them. Once the meeting happens, you both get $100 AMAZON cards! AWESOMENESS!!! Help us to help YOUR FRIENDS, FAMILY & WORK ASSOCIATES. A simple email can: Help Grow Midwest IT! Help friends with better IT! Help you get some extra money. Send us your referrals TODAY. derek@midwest.cc Midwest IT Solutions www.midwest.cc


Delta IT Disaster!!!

Angry customers, negative media coverage, frustrated employees, untold revenue lost, lingering anger from customers: that’s the status for Delta Airlines this week.  Of course this is not news to anyone; unless you have been living under a rock you have heard the numerous news reports detailing the Delta computer disaster.  Whether caused by a minor power outage at Delta headquarters or an internal computer hiccup, the airline was forced to cancel over 500 flights causing gridlock across America’s airports at the height of vacation season.

You may not be running an international transportation corporation, but imagine what would happen to your clients if you had an unexpected IT failure. Think something like this can’t happen to you; think again.  The problem that Delta airlines faced was not the power outage at their headquarters, it was an inadequate IT Disaster Recovery Plan.  As a business owner you don’t want to be caught off guard in the middle of an IT nightmare.  While an IT Disaster Recovery Plan may sound like a great idea you might not even know what one looks like, let alone where to start.  Here at Midwest IT Solutions we are your IT partner and are ready to put together a comprehensive IT Disaster Recovery Plan.  The goal of any good plan is fivefold, it should:

  • Minimize the disruption of business operations
  • Minimize risk of delays with High Availability options
  • Ensure a level of security
  • Assure reliable backup systems
  • Aid in restoring operations with speed

At Midwest IT Solutions, we are your information technology partner.  We will work with you to ensure that your unique IT Disaster Recovery Plan focuses on prevention, anticipation, and mitigation.  Before any plan is deployed we will: perform a comprehensive risk assessment, prioritize your processes and operations, inventory all equipment and technology resources.  Once these steps have been completed we will create a step-by-step IT Disaster Recovery Plan unique to you and your specific IT environment.  Don’t get caught off guard.  Disaster could strike at any time and, if you are not properly prepared, you too could experience the pain and disruption we now see for Delta.  Contact us today to discuss a customized IT Disaster Recovery Plan.