

About the Attack & Damages (Unit 1)

What is WannaCry?
​
The WannaCry ransomware attack was a global epidemic that first appeared on 12 May 2017 that hit around 230,000 computers globally by taking advantage of outdated computer systems and people's lack of awareness for updated software with improved security.
​
This attack denies the user’s excess to their own files unless they paid the threat attackers a given sum using cryptocurrency Bitcoin. It is said that some users may not ever back their files even after paying.
​
​
Who was impacted?
​
The WannaCry worm denied service to hundreds of thousands of computers in more than 150 countries, hitting factories, hospitals, shops, and schools worldwide. The rest of Asia had lower disruptions compared to Europe.
​
According to an analysis by Kaspersky Lab, a Russian antivirus company, one of the first companies affected was the Spanish mobile company, Telefónica. By May 12th, thousands of NHS hospitals and surgeries across the UK were affected. Terrifyingly ambulances were reportedly rerouted, leaving people in need of urgent care in need. It was estimated to cost the NHS a whopping £92 million after 19,000 appointments were canceled due to the attack.
The four most affected countries were Russia, Ukraine, India, and Taiwan. This virus tried to infect more computers in Russia than anywhere else. Their interior ministry, railways, banks, and second-largest mobile phone operator, Megafon, were all threatened by the huge
​
​
​
​
​
​
​
​
​
​
This figure shows a heatmap of the detections from an American software company, NortonLifeLock, formally known as Symantec.
​
​
What was the total loss?
​
On 15 May 2017 marks the end of the attack, It is estimated this cybercrime caused $4 billion in losses across the globe in just a span of 4 days! Ever since then, countries affected have sought to improve their prevention measures to avoid incurring such a major loss in the future. That will be covered in Unit 4.
​
