{"id":29472,"date":"2017-05-13T10:07:22","date_gmt":"2017-05-13T10:07:22","guid":{"rendered":"http:\/\/www.biphoo.com\/bipnews\/?p=29472"},"modified":"2017-05-13T10:07:22","modified_gmt":"2017-05-13T10:07:22","slug":"asia-assesses-ransomware-assault-extent-may-not-known-monday","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/world-news\/asia-assesses-ransomware-assault-extent-may-not-known-monday.html","title":{"rendered":"Asia assesses ransomware assault, extent may not be known until Monday"},"content":{"rendered":"

\n\tAsia assesses ransomware assault, extent may not be known until Monday<\/span><\/span><\/strong><\/span>
\n<\/h2>\n

\n\tSome hospitals, schools and universities in Asia were hit by a global cyber attack which infected tens of thousands of computers in Europe and the United States, but officials and researchers said the extent of any damage may not yet be known.<\/span><\/span><\/span>\n<\/p>\n

\n\tChina's official news agency Xinhua said secondary schools and universities were hit, but did not say how many or identify them.<\/span><\/span><\/span>\n<\/p>\n

\n\tSun Yat-sen University said it received a large number of virus complaints on Friday, the Chinese financial magazine Caixin reported on Saturday, citing a notice circulated by the university's IT department.<\/span><\/span><\/span>\n<\/p>\n

\n\tWilliam Saito, cyber security adviser to the Japanese cabinet and trade ministry, said some of the country's institutions were affected but declined to elaborate.<\/span><\/span><\/span>\n<\/p>\n

\n\tSouth Korea's Yonhap news agency said one of Seoul's university hospitals had been affected. An official said it wasn't yet clear whether the hospital, which he declined to name, had been hit by the ransomware or some other malware.<\/span><\/span><\/span>\n<\/p>\n

\n\tTwo hospitals in Jakarta were hit, according to Semuel Pangerapan, a director general at Indonesia's Communication and Information Ministry.<\/span><\/span><\/span>\n<\/p>\n

\n\tHe said officials were attempting to localise the infected server to prevent the malware from spreading.<\/span><\/span><\/span>\n<\/p>\n

\n\tOne of Vietnam's leading antivirus software companies said dozens of people had reported infections.<\/span><\/span><\/span>\n<\/p>\n

\n\t"This number may increase as people return to work next week. A large number of computers will be turned back on and may be targets," said Vu Ngoc Son, vice president of Bkav Anti Malware.<\/span><\/span><\/span>\n<\/p>\n

\n\tHe declined to identify who had been infected. None were customers of the company.<\/span><\/span><\/span>\n<\/p>\n

\n\tNUMBER OF INFECTIONS FALLING<\/span><\/span><\/span>\n<\/p>\n

\n\tCyber extortionists tricked victims into opening malicious malware attachments to spam emails that appeared to contain invoices, job offers, security warnings and other legitimate files.<\/span><\/span><\/span>\n<\/p>\n

\n\tThe ransomware encrypted data on the computers, demanding payments of $300 to $600 to restore access. Security researchers said they observed some victims paying via the digital currency bitcoin, though they did not know what percent had given in to the extortionists.<\/span><\/span><\/span>\n<\/p>\n

\n\tOfficials in the Philippines and Singapore said there were no reports of breaches of critical infrastructure.<\/span><\/span><\/span>\n<\/p>\n

\n\tNew Zealand and Australia reported no impact on any organisations. India's chief information security officer, Gulshan Rai, said there appeared to be no damage. <\/span><\/span><\/span>\n<\/p>\n

\n\tTwo factors may account for the limited reports of damage in Asia. <\/span><\/span><\/span>\n<\/p>\n

\n\tThe worm began to spread in Europe on Friday, by which time it was already early evening in many Asian countries. The worm spreads most efficiently through organisational networks, not home computers, said Vikram Thakur, principal research manager at Symantec. <\/span><\/span><\/span>\n<\/p>\n

\n\tThat means officials will need to wait until Monday, when business resumes, to gauge the impact on Japan, said Saito.<\/span><\/span><\/span>\n<\/p>\n

\n\t"In Japan, things could likely emerge on Monday," he said.<\/span><\/span><\/span>\n<\/p>\n

\n\tAnother factor may be that the worm's spread was limited by the actions of a British based researcher, who told Reuters he registered a domain that he noticed the malware was trying to connect to.<\/span><\/span><\/span>\n<\/p>\n

\n\tBy buying the domain, the researcher, who declined to give his name but goes by the Twitter handle @malwaretechblog, may have curtailed the worm's spread.<\/span><\/span><\/span>\n<\/p>\n

\n\t"We are on a downward slope, the infections are extremely few, because the malware is not able to connect to the registered domain," said Symantec's Thakur.<\/span><\/span><\/span>\n<\/p>\n

\n\t"The numbers are extremely low and coming down fast; don't expect this to remain a major threat across this weekend apart from those in firefighting mode."<\/span><\/span><\/span>\n<\/p>\n

\n\tBut the attackers may yet tweak the code and restart the cycle. The British-based researcher who foiled the ransomware's spread said he hadn't seen any such tweaks yet, "but they will."<\/span><\/span><\/span>\n<\/p>\n

\n\tSource:- http:\/\/in.reuters.com\/article\/cyber-attack-asia-idINKBN18907T<\/span><\/span><\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t