Thank you so much dear Wisdom. You are the best. Congratulations ! Keep up the great work. Warm regards, -Olevie- 2016-03-24 12:45 GMT+00:00 Casey Olugbenga Adeleye <[log in to unmask]>: > Thanks Wisdom for sharing. > > Casey Adeleye > > Quoting Wisdom Donkor <[log in to unmask]>: > > Dear All, >> >> Yesterday at 2:38pm an employee in one of the organisation in Ghana was >> attacked by ransomware by name locky, this ransomware was sent in an email >> with an attachment , the attachment contained an ms-word document with a >> malicious macro, the locky program was activated when the user clicked >> "enable editing " after the document was opened, this macro begun an >> encryption process using a RSA-2048 and AES-128 algorithm, the encryption >> process targeted the following file extensions >> *.docx;*.pdf;*.pptx;*.xlsx;*.doc >> >> Yesterday Three US hospitals were hit by "locky" as well,The IT systems of >> Kentucky Methodist Hospital and Chino Valley Medical Center and Desert >> Valley Hospital, California, were infected with this ransomware, >> The files cannot be recovered unless the victim has an offline backup to >> recover from or pays a ransom with bitcoins via the darkweb,the attackers >> promise to send the private key in a compiled program to decrypt the >> victim's files after they receive payment. >> System restore cannot restore files just settings so it will not help in >> this case. >> >> Third-party recovery software cannot recover the encrypted files because >> the files are not considered as deleted. The previous ransomware by name >> "cryptolocker" did not rename the files it encrypted so it was possible to >> recover your files by using the windows "previous version" feature, >> however >> "locky" renames all the files it encrypts so that windows cannot index the >> file's shadow copies to recover them. >> >> CERT-GHANA recommends that all users open email attachments with caution >> especially executable files. >> >> Cheers, >> >> >> >> >> >> *WISDOM DONKOR (S/N Eng.)* >> ICANN Fellow / ISOC Member, IGF Member, Diplo Foundation >> OGP Working Group Member, Africa OD Working Group Member >> E-government and Open Government Data Platforms Specialist >> National Information Technology Agency (NITA) >> Ghana Open Data Initiative (GODI) >> Post Office Box CT. 2439, Cantonments, Accra, Ghana >> Tel; +233 20 812881 >> Email: [log in to unmask] >> [log in to unmask] >> [log in to unmask] >> Skype: wisdom_dk >> facebook: facebook@wisdom_dk >> Website: www.nita.gov.gh / www.data.gov.gh >> www.isoc.gh / www.itag.org.gh >> > -- *Olévié Ayaovi Agbenyo KOUAMI* *Directeur-Adjoint de O and K IT SOLUTIONS sarl Editeur de logiciels de gestion (PGI/ERP) S.I.G.E. (http://www.oandkit.com <http://www.oandkit.com>)* *Président/CEO de l'INTIC4DEV (Institut des TIC pour le développement) http://www.intic4dev.org <http://www.intic4dev.org> * *Secrétaire Général de l'ESTETIC - Association Togolaise des professionnels des TIC (http://www.estetic.tg <http://www.estetic.tg>)* *ICANN-GNSO-NCSG-NPOC Communications Committee Chair (http://www.npoc.org/ <http://www.npoc.org/>)**ICANN - Fellow & Alumni (http://www.icann.org <http://www.icann.org>) - Membre de Internet Society (http://www.isoc.org <http://www.isoc.org>) * *Membre fondateur du RIK-Togo (Réseau Interprofessionnel du Karité au Togo)* (http://www.globalshea.com) - *Skype : olevie1 FaceBook : @olivier.kouami.3 Twitter : #oleviek Lomé – Togo*