Microsoft has posted a warning to users about ZCryptor, a newly discovered ransomware variant which has the rare ability to self-replicate. Security experts expect future ransomware will follow to become more efficient at spreading to and infecting larger targets.
The ransonware worm that can initially infect targets through traditional phishing schemes, macros or fake installers, but also has the ability to place autorun files on removable storage devices. This means the ransomware can spread itself to other machines on portable storage devices, rather than relying on more targets to fall victim to phishing, according to Microsoft.
It is thought that ransomware will become self-replicating and that ransomware worms are part of the natural evolution of malware. This is part of a broader trend to focus on spreading beyond the initially infected host in order to cause more damage.
Microsoft suggest that the new ransomware worm just affects the older versions of Windows. Microsoft’s first suggestion for users to protect themselves is to upgrade to Windows 10. While experts generally considered this to be good advice, because Windows 10 has better security features some tests have found Zcryptor to function in exactly the same disastrous way.
YOU Systems IT Support team would still suggest moving to Windows 10 now given the fact that it is still free to upgrade from Windows 7 and 8. It wouldn’t be a preventative measure in this case however, it is an operating system, which is constantly reviewed with security updates so likely to offer more protection in the long term.
Just make sure you take regular backups of data to external sources, being wary of an emails you are not expecting, disabling macros in Office, and avoiding websites that are known for being malware breeding grounds such as illegal music sites.