{"id":6109,"date":"2017-06-28T14:09:52","date_gmt":"2017-06-28T14:09:52","guid":{"rendered":"https:\/\/igotoffer.com\/blog\/?p=6109"},"modified":"2018-02-10T15:55:01","modified_gmt":"2018-02-10T15:55:01","slug":"symantec-vaccine-ransomware","status":"publish","type":"post","link":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware","title":{"rendered":"Vaccine from the New Ransomware"},"content":{"rendered":"

Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware<\/h2>\n

On Tuesday, organizations across the world suffered just another huge cyber-attack. But, the problem with this ransomware nicknamed \u2018Misha\u2019, is that the victims can\u2019t pay the ransom fee: the culprits provided an invalid email address, which was shut down by the hosting provider. The Bitcoin wallet, where ransom money should be deposited, hasn\u2019t been touched at all. For the moment, the wallet contains about $8,000-worth of Bitcoin, a ridiculous prize for a significant and widespread attack.<\/p>\n

\"vaccine

Source of the image: https:\/\/ichef-1.bbci.co.uk\/news\/624\/cpsprodpb\/122AA\/production\/_96701447_mediaitem96701446.jpg<\/p><\/div>\n

That\u2019s why this attack is viewed upon as politically motivated attack on Ukraine, since it started on the Constitution Day.<\/p>\n

HOW IT SPREADS<\/h3>\n

Cisco\u2019s Talos experts believe the attack may have been carried out by exploiting vulnerable accounting software. Specifically, by software update systems for a Ukrainian tax accounting package, called MeDoc.<\/p>\n

MeDoc posted an update to its website on Tuesday, saying in Russian, \u201cAttention! Our server made a virus attack\u201d but later removed it and is now denying the fact that its software was exploited.<\/p>\n

Regardless if it was politically motivated or not, \u2018Misha\u2019 has affected systems across the world. It inflicted computer networks in Russia enterprises and is detected in Europe as well as the USA. Russian oil giant Rosneft, British advertising firm WPP, DLA Piper law firm and at least one hospital in the US city of Pittsburgh suffered the attack as well.<\/p>\n

WHAT IS THE \u2018VACCINE\u2019 SYMANTEC DISCOVERED<\/h3>\n

Since the attack started, many security experts have been searching for a method to stop the epidemic. As with the latest virus WannaCry, the solution is simple and unexpected enough. The Symantec experts have discovered that \u2018Misha\u2019 looks for a file called perfec.dll on an attacked computer. This file signals that the system is infected. So, the answer is to create a faked file in order to trick the malware.<\/p>\n

HOW TO CREATE THE \u2018VACCINE\u2019<\/h3>\n
    \n
  1. Open WordPad.<\/li>\n
  2. Save the empty file on a desktop under the name of perfec.dll<\/li>\n
  3. Right-click the file and click Properties<\/em> in the drop-down menu.<\/li>\n
  4. Tick the Read Only<\/em> box and save the changes.<\/li>\n
  5. Copy it into the C:\/Windows. You have to have an admin access to do this.<\/li>\n<\/ol>\n

    Disclaimer:<\/em> It\u2019s an emergency measure, but it will give you some time to update your antivirus and protect your system thoroughly. Please, check your antivirus provider for a patch against \u2018Misha\u2019 immediately.The<\/p>\n

    experts also state that updating the OS on a regular basis is all a private user needs to do in order to stay on the safe side. Still, many users forget to update or do not update the system deliberately, to avoid the hardware conflicts Windows 10 is so notorious for.<\/p>\n

    DISADVANTAGES<\/h3>\n

    Though the ransomware won\u2019t be able to harm your system, it can use it as an \u2018infected\u2019 platform all the same. We stress again, that you use this cure only when you aren\u2019t able to get any updates soon, but strongly suspect that your system may be in danger. For instance, if you used the public hotspot. So, remember to remove the fake perfec.dll file after you update your OS and antivirus!<\/p>\n

    THE DANGERS OF TOMORROW<\/h3>\n

    Ransomwares have become not only criminal, but political tools as well. Because of the high security standards in governmental offices and facilities, hackers use the official software sites to inflict the computers with impunity. A mouse and a keyboard are now as dangerous as nuclear weapons and even more. The Western powers need to face the challenge at once, and assign means for building a hack-proof, sandboxed network for governments and public facilities.<\/p>\n

    Though, it\u2019s impossible to create a 100% hack-proof network, the scale and number of cyber-attacks can be diminished significantly.<\/p>\n

    We\u2019d like to add one more advice to the list of precautions we\u2019ve shared with our readers.<\/p>\n

    Always check the software manufacturers\u2019 sites to see if they\u2019re secure. The virus can sneak in with the legal update.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware On Tuesday, organizations across the world suffered just another huge cyber-attack. But, the problem with this ransomware nicknamed \u2018Misha\u2019, is that the victims can\u2019t pay the ransom fee: the culprits provided an invalid email address, which was shut down by the hosting provider. The Bitcoin wallet, where […]<\/p>\n","protected":false},"author":1,"featured_media":6110,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[460],"tags":[],"yoast_head":"\nVaccine from the New Ransomware | iGotOffer<\/title>\n<meta name=\"description\" content=\"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vaccine from the New Ransomware | iGotOffer\" \/>\n<meta property=\"og:description\" content=\"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware\" \/>\n<meta property=\"og:site_name\" content=\"iGotOffer Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/iGotOffer\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/svetlana.ustinova2\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-28T14:09:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-10T15:55:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"558\" \/>\n\t<meta property=\"og:image:height\" content=\"313\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@iGotOffer\" \/>\n<meta name=\"twitter:site\" content=\"@iGotOffer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Steve\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#website\",\"url\":\"https:\/\/igotoffer.com\/blog\/\",\"name\":\"iGotOffer Blog\",\"description\":\"News and reviews about electronics & apps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/igotoffer.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#primaryimage\",\"url\":\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg\",\"contentUrl\":\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg\",\"width\":558,\"height\":313,\"caption\":\"https:\/\/ichef-1.bbci.co.uk\/news\/624\/cpsprodpb\/122AA\/production\/_96701447_mediaitem96701446.jpg\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#webpage\",\"url\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware\",\"name\":\"Vaccine from the New Ransomware | iGotOffer\",\"isPartOf\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#primaryimage\"},\"datePublished\":\"2017-06-28T14:09:52+00:00\",\"dateModified\":\"2018-02-10T15:55:01+00:00\",\"author\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16\"},\"description\":\"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.\",\"breadcrumb\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/igotoffer.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vaccine from the New Ransomware\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16\",\"name\":\"Steve\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g\",\"caption\":\"Steve\"},\"sameAs\":[\"https:\/\/igotoffer.com\/\",\"https:\/\/www.facebook.com\/svetlana.ustinova2\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vaccine from the New Ransomware | iGotOffer","description":"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware","og_locale":"en_US","og_type":"article","og_title":"Vaccine from the New Ransomware | iGotOffer","og_description":"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.","og_url":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware","og_site_name":"iGotOffer Blog","article_publisher":"https:\/\/www.facebook.com\/iGotOffer","article_author":"https:\/\/www.facebook.com\/svetlana.ustinova2","article_published_time":"2017-06-28T14:09:52+00:00","article_modified_time":"2018-02-10T15:55:01+00:00","og_image":[{"width":558,"height":313,"url":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_creator":"@iGotOffer","twitter_site":"@iGotOffer","twitter_misc":{"Written by":"Steve","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/igotoffer.com\/blog\/#website","url":"https:\/\/igotoffer.com\/blog\/","name":"iGotOffer Blog","description":"News and reviews about electronics & apps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/igotoffer.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#primaryimage","url":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg","contentUrl":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/06\/semantic.jpg","width":558,"height":313,"caption":"https:\/\/ichef-1.bbci.co.uk\/news\/624\/cpsprodpb\/122AA\/production\/_96701447_mediaitem96701446.jpg"},{"@type":"WebPage","@id":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#webpage","url":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware","name":"Vaccine from the New Ransomware | iGotOffer","isPartOf":{"@id":"https:\/\/igotoffer.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#primaryimage"},"datePublished":"2017-06-28T14:09:52+00:00","dateModified":"2018-02-10T15:55:01+00:00","author":{"@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16"},"description":"Symantec Discovered a \u2018Vaccine\u2019 from the New Ransomware. On Tuesday organizations across the world suffered just another huge cyber-attack.","breadcrumb":{"@id":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/igotoffer.com\/blog\/symantec-vaccine-ransomware#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/igotoffer.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vaccine from the New Ransomware"}]},{"@type":"Person","@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16","name":"Steve","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g","caption":"Steve"},"sameAs":["https:\/\/igotoffer.com\/","https:\/\/www.facebook.com\/svetlana.ustinova2"]}]}},"_links":{"self":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts\/6109"}],"collection":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/comments?post=6109"}],"version-history":[{"count":0,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts\/6109\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/media\/6110"}],"wp:attachment":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/media?parent=6109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/categories?post=6109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/tags?post=6109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}