Microsoft and Trend Micro are warning of a new variant of ransomware that has the ability to self-replicate.   This variant, known as ZCryptor, is able to create copies of itself on removable media such as USB drives in order to spread itself to as many computers as possible.

ZCryptor targets Microsoft Windows computers.  This ransomware variant will encrypt all of your important files and demand a ransom of $500 – $2200.

McMaster IT Security strongly recommends against paying ransom

Contact your local IT support or the UTS service desk if you are attacked by ransomware.

Tips to protect yourself from this threat:

• Uninstall unused software: did you know that Apple is no longer supporting or updating QuickTime? Or that some browsers actively prevent the use of Adobe Flash?  Uninstall unsupported software, software with bad security reputation, and any software that you aren’t using.
• Install all software updates and patches: updates, patches and hotfixes repair known bugs and security problems in the software that you regularly use. It is your responsibility to ensure that these critical patches are installed on your computer.
• Use antivirus / antimalware software: configure your antivirus software to run in real time, and to scan all of the files on your hard drive every few days. Check daily to make sure it is working as you expect.
• Back up your data regularly: copy your critical files to a network drive to ensure that they can be restored in the event of a ransomware attack. **Note: if you are currently using a removable drive to back up your data, please make sure it is disconnected from your computer when it is not in use.
• Beware of Phishing emails: it is important to be suspicious of any emails that you weren’t expecting to receive, especially if they include a link to a website or an attached document. Remember: hover before you click, and don’t take attachments from strangers!

External Resources:

• https://blogs.technet.microsoft.com/mmpc/2016/05/26/link-lnk-to-ransom/
• http://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ransom_zcrypt.a

______________________________________________________________________________

Contact McMaster IT Security for more information about this and other internet threats, and how we are working to keep you safe:

email: c-it-security@mcmaster.ca

Web: http://itsecurity.mcmaster.ca/

Twitter: @McMaster_ITSec (https://twitter.com/McMaster_ITSec)

Facebook: https://www.facebook.com/mcmaster.itsec

Telephone: x28299

University Technology Services thanks you for your cooperation and understanding.

If you have any questions or concerns, or experience any problems

later, please contact the UTS Service Desk at

uts@mcmaster.ca or ext. 2-HELP (24357).

Please be aware that there is no option to withdraw your consent to receive these messages.