WannaCry ransomware incident 3 years ago, I believe many people have lingering fears. Although it has been relatively safe in recent years, there have been no major global news reports.viral infectionevent, but it seems to be starting again recently (?). According to Chinese reports, many Chinese netizens have recently reported that they have been infected by a new type of WannaRen ransomware. Cases have been reported on Windows 7, Windows 10, and even Windows XP systems. It can encrypt almost all Windows files. What’s special is that the unlocking conditions required are the same as WannaCry. You must pay in Bitcoin within three days, otherwise the price will double.
New WannaRen ransomware appears
This Weibo report mentioned, recently in various forums in China, the number of people seeking help from the WannaRen ransomware has increased sharply, and the whole behavior is the same as WannaCry 3 years ago. It will encrypt many files in the computer, and you have to pay a ransom fee if you want to open it, and the period is 3 days. The only difference is that the amount required is relatively low, only 0.05 Bitcoin, which is about NT$10,500 based on the current conversion of about 1:7000 (USD):
The encrypted computer file type will display WANNAREN, and the above screen will appear when trying to open it. I don’t know why, but the WannaRen ransomware content is in Traditional Chinese, unlike WannaCry, which is in Simplified Chinese:
The good news is that there are already anti-virus software that can detect WannaRen, and it is no surprise that there are several commonly heard ones. However, although it could be detected, one netizen reported that he immediately carried out anti-virus actions, but his computer was still infected:
Many people wonder if it is a variant of WannaCry? But based on current reports, it seems not.
However, it may be that the currently infected computer files are not very important. If you check the Bitcoin wallet address, both the number of transactions and the amount received are 0, which means no one has paid yet:
Don’t worry if you are really accidentally caught. Someone has already provided steps to remove WannaRen ransomware on YouTube. I’m not sure if it’s really feasible, but you can try it and see:
For now, it is still recommended that you do not download unknown files, documents, pictures or videos on the Internet, so as to avoid poisoning as much as possible. If possible, it is also best to install anti-virus software, whether paid or free (paid is undoubtedly the best,Those who want to get it at the lowest price can refer to this article), at least one more layer of protection.
Source: KOCPC Chinese