What Is WannaCry?


About | WannaCry

What is it?
Also known as Wanna Decryptor or wcry, it is a piece of malicious software that encrypts files on a user’s computer, blocking them from view and threatening to delete them unless a payment is made.

How is it installed?
The virus made it onto computers thanks to a vulnerability in Windows that was exploited using a tool named EternalBlue, believed to be first developed by America’s NSA. Many computers had not been updated with protection against the exploit.

What does it do?
Once opened, the virus is able to encrypt files and block user access to them, displaying a pop-up window on-screen telling users they have been blocked and demanding payment – often via a digital currency such as Bitcoin.

Can you remove it without paying?
Yes, by using advanced anti-malware software. The malware can also be removed manually with a computer in “safe mode”, however security experts warn this runs the risk of damage to a PC as users must go through sensitive system files in order to find and isolate files created by the Wanna Decryptor software.

Leave a Reply