健康资讯 The WannaCry ransomware virus, also known as Wanna Decrypter, is a type of computer malware that locks a computer's hard drive and data until a sum of money is paid. It is one of the largest cyberattacks in history, and has affected more than 300,000 computers in over 150 countries since its discovery in May 2017.
2、Origin
WannaCry is believed to have been created by a hacking group called the Shadow Brokers, though the precise origin of the virus remains uncertain. The virus is believed to have been designed to exploit a vulnerability in Windows-based computers by exploiting a code known as “EternalBlue”, which was developed by the US National Security Agency and leaked to the public in April 2017.
3、Attack
Once the virus is installed on a computer, it will encrypt the user’s files and demand a payment of a certain amount of Bitcoin in exchange for the decryption key. The ransom is typically between $300 and $500. Once the payment is made, the user is sent the decryption key, which allows the user to unlock their computer and access their data again.
4、Spread
The virus is able to spread rapidly due to its use of a Microsoft exploit known as “DoublePulsar”, which allows the virus to spread itself across a network of computers connected to each other. This allows the virus to spread quickly, as it is able to move from one computer to another without user input or even being noticed.
5、Prevention
The best way to protect against WannaCry is to ensure that your computer is up-to-date with the latest security patches, and to be vigilant when opening emails and downloading files and programs from the internet. Additionally, users should also ensure that their data is backed up regularly in case of infection. If your computer is infected, it is important not to pay the ransom, as there is no guarantee that the decryption key will be sent to the user. Instead, it is best to seek professional help from a security company to remove the virus and restore any damaged files.
1、“Wanna Cry”是一种勒索软件，即“勒索病毒”，它利用漏洞来感染计算机系统，从而加密用户的文件并要求支付赎金才能解密文件。
2017 年5月12日，“WannaCry”勒索病毒爆发式地蔓延，给全球数百万台计算机造成重大破坏，在全球范围内引起了广泛的关注，它把腐蚀一夜之间带到了每个角落。
2、WannaCry 是全球性的病毒传播，突然蔓延，攻击的重点是全球的Windows 电脑系统，包括公司和政府机构，它会对受感染的计算机上的文件和系统进行加密，感染者只有在解决特定的支付问题之后，才能解决被加密文件的问题。感染几乎是当即发生的，随后就会造成数据巨大损失，大量崩溃或受持续攻击，受到影响的全球组织超过250个，受损失最严重的当属英国国家医疗服务NHS系统，导致其部分医院及诊所停止跳转各个设备。
3、有关WannaCry的另一个重要特性是，犯罪活动利用“社工”或个人上网行为来向每台电脑发射“拉里这场病毒，并用一种叫做“EternalBlue”的恶意代码把它传播”，获得未经许可的远程访问。受害者首先得到了一封勒索信，然后大量数据会被加密，再要求付款，以解密文件。犯罪者向受害者要求支付比特币交易费，以购买解密软件。
4、总之，WannaCry是一个勒索软件，其工作原理是病毒侵入受感染系统，将用户的文件加密，然后要求受害者支付赎金才能解密文件。它利用EternalBlue恶意代码传播，最终向受害者要求以比特币的形式支付赎金，以换取解密软件。
