This message contains important information for all ASI® members. While there is no issue with your ASI account, we want to alert you to breaking news of a major cyberattack that has struck computer systems from the Ukraine to the U.S., wreaking havoc for employees and customers alike.

The attack caused computers to stop working, instead displaying a ransom note demanding money. The widespread attack affected numerous global and national organizations, including the Ukrainian National Bank, British advertising firm WPP, U.S. pharmaceutical company Merck and major law firm DLA Piper.

The recent attacks appear to evade popular antivirus software. The U.S. Computer Emergency Readiness Team, which responds to major cyber threats, discouraged individuals and organizations from paying the ransom, saying there is no guarantee that this would result in access being restored.

From what we have been able to learn, like the WannaCry attacks in May, the hack on Tuesday takes over computers and demands digital ransom from their owners to regain control of their computers. It would only take one machine behind a company firewall to become infected to put all other workstations and servers at risk.

We advise you to make sure your patches are up to date (including the “MS17-010” security update, link below), constantly update your antivirus definitions and remind all staff to think before they click when they receive any out-of-the-ordinary emails. Link to patch: https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

This is still a developing story – security researchers across the world are all over this, as is ASI. Please be on the lookout for updates.

Ransomware is a type of cyberattack that locks all digital files and demands payment in order for them to be returned. Computers that are infected with a ransomware virus become unusable save for displaying a ransom note. It is difficult to recover files from a computer that has been infected with ransomware and victims are often advised not to pay the fee. If they decide to, they are advised that their information may not be returned fully and that it has been compromised.

Please see image below for an example of the message:

I hope you find this information helpful. We always want to keep you informed and help you keep your business safe.

Regards,

Armughan Rafat
EVP, Chief Technology Officer for the ASI Family of Companies