Cyber ​​attack in 99 countries, 75,000 computers infected with malware

A massive cyber attack, apparently using tools stolen from the US National Security Agency (NSA), has affected a number of countries around the world, with some 75,000 computers infected with malware.

Extortion message from cyber attackers. Photo: Twitter

Computers at thousands of locations have been infected with ransomware, locking users' data unless they pay attackers $300 in Bitcoin, the BBC reported.

The attackers appear to have exploited a vulnerability in Microsoft systems that the US National Security Agency (NSA) discovered and dubbed EternalBlue. In April, hackers from the “Shadow Brokers” group claimed to have stolen NSA tools and published them online.

Sources said the cyber attack took place on a global scale, affecting 99 countries, including the UK, US, China, Russia, Spain, Italy and Taiwan.

Cybersecurity firm Avast said it had seen 75,000 infections of the malware – known as WannaCry and variants of the name – worldwide. “This is a massive attack,” said Jakub Kroustek, of Avast.

A series of major companies were attacked by cyberattacks.

A series of hospitals in the UK were affected by a cyber attack on May 12. Photo: DM

Images posted on social media show a computer screen from the UK’s National Health Service (NHS) showing a $300 Bitcoin payment with the message: “Oh, your data is encrypted.” The message demands payment within three days or the price will double, and if the money is not paid within seven days, the data will be deleted.

An NSA employee said patients were definitely affected by the cyber attack.

Some sources say Russia has seen more malware infections than any other country. The Russian Interior Ministry said it had "contained the virus" after "an attack on personal computers using the Windows operating system".

Users also posted images of infected computers, including a local train ticket machine in Germany and a computer room at a university in Italy.

A number of Spanish companies, including telecommunications group Telefonica, energy company Iberdrola and gas supplier Gas Natural, were also attacked. Employees at these companies were told to turn off their computers.

A series of other major companies such as Portugal Telecom, FedEx, Megafon also became victims of cyber attacks.

Nhiều nhà nghiên cứu nói rằng các vụ tấn công dường như có liên quan tới nhau, nhưng cho biết đây dường như không phải một cuộc tấn công phối hợp nhằm vào các mục tiêu cụ thể.

Theo Dân trí