Name of Malware: WannaCry (Wcry, WannaCryptor, Wana)

Type of Malware: Ransomware

Affected Operating Systems: Windows

Affected Device Types: PCs, laptops etc.

Impact: high

What is WannaCry?

WannaCry is a piece of malware that encrypts important data on infected systems in order to extort money from the victim.

How did I get infected with WannaCry?

WannaCry automatically spreads from infected systems connected to the Internet by exploiting a critical security vulnerability in Windows operating systems. This vulnerability is known as EternalBlue and was corrected with a patch published by Microsoft.

What do I have to do now?

To eliminate WannaCry, we recommend scanning the infected system with an anti-virus program. It is not usually possible to recover the encrypted files, even if the ransom is paid. Further information on removing this malware can be found under Removing infections from PCs, laptops etc.

Technical specifications

Further information on this malware can be found on the website of our project partner Fraunhofer FKIE.