Synology-SA-17:17 WannaCry Ransomware

Abstract

WannaCry, a ransomware program targeting Microsoft Windows, does not affect DSM. However, if you have virtual machines running Windows in Virtual Machine Manager, it is highly recommended to install the security update for MS17-010

Severity

Not affected

Description

WannaCry (or WannaCrypt, WanaCrypt0r 2.0, Wanna Decryptor) ransomware attack is targeting Microsoft Windows via remote code execution vulnerabilities that exist in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. The attack spreads by multiple methods, including phishing emails and on unpatched systems as a computer worm.

References
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx https://en.wikipedia.org/wiki/WannaCry_ransomware_attack
http://thehackernews.com/2017/05/wannacry-ransomware-windows.html