Microsoft updates security tools to fight ransomware attack

Microsoft updated security tools Friday to stop the ransomware that has wreaked havoc across the world. 

Ransomware is software designed to prevent the normal function of a computer until a victim pays a ransom. The new WanaCrypt0r 2.0 ransomware was particularly virulent because it took advantage of hacking tools stolen from the NSA.  

Microsoft successfully patched the security flaw that allowed the NSA tool – called EternalBlue – to function in March. Companies are sometimes slower then antivirus software to enact operating system updates because operating system updates occasionally make niche business software programs unstable. 

{mosads}

On Friday Windows updated two security tools that come in Windows – the Windows Defender antivirus and Windows Security Essentials – to also be on the lookout for WanaCrypt0r. 

Kaspersky Lab identified tens of thousands of WanaCryt0r attacks in 74 countries today. It caused hospitals in Britain to turn away patients, a massive work stoppage at a Spanish telecom and the infection of 1,000 computers at the Russian Interior Ministry. 

The EternalBlue tool used by the ransomware was one of a number of NSA hacking tools leaked by a group called the ShadowBrokers, who have been releasing tools since summer. EternalBlue was released in April, after Microsoft had already patched the bug. 

The ShadowBrokers initially tried to auction the tools, and made occasional leaks of still-dangerous tools to prove they had the wares they claimed. Unhappy with the bids and other monetization schemes, the Brokers sent a farewell message in January.  

In April, the Brokers released a new package of tools, which they claimed was in protest of President Trump making centrist decisions rather than far-right wing ones. 

Experts agree that keeping software up to date is a critical defense against hackers and malware. 

– This story was updated on May 13 at 12:43 p.m.