Watch out for new dangerous viruses similar to WannaCry

Recently, the whole world is having a headache to prevent the spread of WannaCry virus, this case has not been resolved, recently the Security Network agencies have announced the appearance of another type of computer virus. Similar activities like WannaCry are silently spreading globally. Experts say the virus has infiltrated security holes on the Windows operating system and has spread more than 200,000 machines and helped hackers hack silver.

1. How to identify WannaCry malicious code from Vietnam Computer Emergency Response Center (VNCERT)
2. All about WannaCry, Ransomware has been confusing for the past few days
3. If there is not enough ransom for the file, send an email to complain to the hacker, maybe you will get a surprise gift

This information, which was released on May 16, made the whole world more concerned about the weaknesses of Windows revealed by WannaCry, and this information also provided more evidence, but still not. Identify exactly the attackers behind WannaCry.

WannaCry is the cyber attack code created by the US National Security Company, but the software was stolen by hackers on May 12 and spread widely across networks. This virus has caused 300,000 computers worldwide to be locked out of the data in the device, and asked the victim to give them a sum of money to retrieve the previously locked file.

Unlike WannaCry, this new virus started attacking the computer in late April and early May but it was only recently discovered because the infected machine could still run normally and they were installed. into computers to create virtual money, not ransom, just like WannaCry. Proofpoint CEO Ryan Kalember said that the father of this new virus has collected more than $ 1 billion, far more than the number of WannaCry collected.

This new virus works similarly to WannaCry malicious code, they invade through Microsoft's Windows software vulnerability. The vulnerability has been patched in updated Windows versions, but not every individual or organization has installed the patch.

Virtual money is generated by blockchain technology. With this technology, new money will be created for each complex problem solved. The "digging" software will run for the computer to automatically solve the problem and create money, the value of this currency fluctuates depending on market supply-demand.

Bitcoin is the most valuable virtual currency in this program, but the hacker group spreading the virus does not use Bitcoin but instead uses Monero. According to Kaspersky Lab, this Monero currency has been used by North Korean hackers to host computers in Europe.

Earlier, early versions of WannaCry were discovered using many programming codes used by Lazarus to attack the network. However, researchers and US intelligence officials recommend that the evidence is not enough to conclude and the investigation is only in the early stages.

Mr. Kalember believed that the similarities in the European case, WannaCry and the recent "mining" were not "coincidental".

"This coincidence is too big," he said. "It's not anywhere in the world that you have Monero money creation software."