Aarhus University Seal / Aarhus Universitets segl

The ransomware worm WanaCrypt0r is in circulation

During the last couple of days, the healthcare sector, for example, has experienced large-scale ransomware attacks as mentioned on the news. We therefore urge staff and students to exercise extra caution before opening files and links.

2017.05.15 | Marie Lærke Justesen

Photo: Colourbox.dk

During the last couple of days, the healthcare sector, for example, has been hit by large-scale ransomware attacks, and large amounts of data are affected. Ransomware encrypts files on the local PC and on network drives. The people behind the attack then demand a ransom for making the files accessible again.

This ransomware code can use the network to spread to other computers which makes this threat even more serious than previous ransomware attacks.

So far, AU has not been hit, but there is still a risk that it might happen. We therefore urge staff and students to exercise extra caution before opening unknown files and links.

If you store your data on the university’s network drives, a backup is created automatically. Make sure that you have a backup of your own data, if you don't store your data on the university's network drive. If you use a USB disc to create a backup, please remember to remove the USB disc when the backup has been created, otherwise your backup will also be encrypted in case of an attack. DropBox, OneDrive etc just contain copies of your files which will also be encrypted if you are attacked.

If you are attacked, make sure that all network access from your PC is turned off - wired network as well as WIFI. Your PC should then be reinstalled, and your backup can be used to restore your data. Naturally, you should never pay to get your data back.

Administrative, Administration (Academic), All groups, All AU units, Administration, AU IT