WANNACRY

The biggest ransomware attack in history

Admittedly not everyone is a cyber security expert. But, if you hadnt heard of ransomware before this month, chances are youve heard of it now.
The WannaCry ransomware has rocked every corner of the globe over the past two weeks, affecting more than 250,000 victims across 150 countries in one
of the most aggressive and widespread cyber attacks in history. Whether directly affected or not, boardroom nerves the world over have been rattled as
decision-makers face up to the risk cyber threats present to their organisation

COUNTRIES HIT BY WANNACRY

Affected Unaffected

UNITED STATES UK GERMANY JAPAN

Delivery company FedExs NHS organisations disrupted and many Deutsche Bahn confirmed ransomware had disrupted Electronics company Hitachi and
logistical operations affected operations cancelled at short notice train station departure boards across the country carmaker Nissan were both targeted

SPAIN FRANCE RUSSIA INDIA

Telecoms and gas companies struck Some Renault factories Largest number of incidents reported, including One of the worst hit nations with tens
had to stop production disruptions at the Russian interior ministry of thousands of computers affected

Kaspersky/BBC

BACKGROUND
WannaCry (also known as
WanaCrypt0r and WCry), a new
varient of the Ransom.CryptXXX
family of ransomware, hit
companies and individuals across
the globe on May 12. WannaCry
types and asks victims to pay $300
in bitcoins to one of three bitcoin
wallets to release the data. If
payment is not made, the ransom
would double after three days; if
payment is not made in seven days,

+250k 150 $300 176

exploits a vulnerability in the older the encrypted files would be erased.
Microsoft Windows XP operating While victims have been advised not
system, security updates for which to pay, funds are still being sent to
were stopped in 2014. the ransomware attackers. systems affected by the countries affected ransom requested different file
WannaCry ransomware per system types encrypted
It can encrypt 176 different file

TOTAL AMOUNTS PAID TO WANNACRY ATTACKERS GLOBAL DESKTOP OPERATING SYSTEM RANSOMWARE OUTSMARTING
Balances of the three bitcoin addresses linked to the MARKET SHARE CYBER-DEFENCE MEASURES
WannaCry ransomware up to May 25 APRIL 2017 DEFENCE STRATEGIES IN PLACE WHEN
Millions of PCs still run on Windows XP, the third RANSOMWARE ATTACKS OCCURRED
Balance in bitcoin Balance in $k Total number
of transactions most popular desktop operating system worldwide

G F
17.01 19.3 13.83 E
D

C 93%
45.2 51.3 36.7 A Anti-virus/
anti-malware
software
122

A Windows 7 48.5% E macOS Sierra 3.2%

107
104

B Windows 10 26.3% F Linux 2.1% 77%

E-mail/
spam filters
C Windows XP 7% G Other 5.9%

D Windows 8.1 6.9%

NetMarketShare 2017

LEADING CAUSES OF
58%
Patched/
RANSOMWARE INFECTION updated
Global survey of IT managed service providers apps
E

D
Ad/
21% pop-up
blockers
A B

Cyber-
14% security
training

A Spam/phishing 46% D Lack of 1%

e-mails security

B Lack of employee 36% E Other 5%

training
WALLET 1 WALLET 2 WALLET 3
C Malicious websites/ 7%
web adverts
Bitref.com Datto 2016 Datto 2016