Firms that didn’t patch and enabled local admin rights continue to suffer post cyber-attack

By Graham Cluley on Jul 12, 2017 | 

Here’s a salutary reminder for all businesses.

Just because a malware outbreak has begun to fade away from the newspaper headlines, doesn’t mean your troubles are over.  Many firms can continue to suffer long afterwards.

In late June, a malware attack crippled businesses and critical infrastructure in Ukraine at astonishing speed.

Initially suspected of being a similar ransomware attack to the WannaCry outbreak seen the month before, the malware (variously named as Petya, NotPetya or GoldenEye by security vendors) appears to have been launched through a malicious automatic update to a popular Ukrainian accounting software tool called MeDoc.

We tell companies all the time to keep their software updated with the latest available patches, and yet here was an update which actually delivered a devastating malware attack.  The irony isn’t lost on anybody.
​

Read More