بيروت، لبنان

© Copyright 2014-2019, Green Bits Ltd. All Rights Reserved.

  • LinkedIn - White Circle
  • Facebook - White Circle
  • Twitter - White Circle
Follow us on


Tarek ElJammal
May 15, 2017

"Wanna DecryptOr" Ransomware Outbreak


Edited: May 19, 2017


What is it?

A new ransomware attack called 'Wanna' (also known as WannaCry, WCry, WanaCrypt, WanaCrypt0r, or Wanna Decrypt0r) is encrypting files and changing the extensions to: .wnry, .wcry, .wncry and .wncrypt.


For the latest information about how to stay protected, refer to the Sophos Knowledge Base article.

Learn More

For additional background on this attack, learn more on Sophos Naked Security.

Learn More



How Do I Stay Protected?

1. Update all Windows environments as described in Microsoft Security Bulletin MS17-010.

2. Whitelist any kill switch domains related to this attack. 

3. Update your endpoint software to ensure you have the latest protections for this threat.

4. Ensure you are running advanced ransomware protection such as Intercept X or Sophos Exploit Prevention (EXP).

5. Home users, consider signing up for the Sophos Home Premium beta, which adds advanced protection from ransomware.



Intercept X Is the Most Advanced Ransomware Protection Available


The proven CryptoGuard capabilities in Sophos Intercept X block ransomware as soon as it starts trying to encrypt your files, returning data to its original state. Intercept X:

  • Protects endpoints from ransomware attacks

  • Automatically rolls back encrypted file changes with no data loss

  • Stops both local and remote file encryption



Oct 29, 2017

Unfortunately, a new malicious code has already been created, which causes no less damage - this is the Redboot. Here are some ways to protect http://myspybot.com/redboot-ransomware/

New Posts
  • Tarek ElJammal
    Dec 19, 2018

    In this article, we will demonstrate to you how to configure a DNS forwarder in Windows Server 2012 R2. We assume you have already configured DNS on both servers. Prerequisites Following five are prerequisites: Ensure that the Administrator account has a strong password. A static IP is configured. Latest windows updates are installed. DNS is already configured on both machines (primary DNS and secondary DNS servers). Setting Up a DNS Forwarder in Windows Server 2012 R2 Step 1: Open server manager dashboard and click on  Tools . Scroll down the menu and click on DNS . Step 2: In DNS manager, right-click and scroll down the menu. Click Properties Step 3: Click Forwarders tab and then click Edit Step 4: Enter the IP address of your secondary DNS server you want to forward DNS queries. Here you can choose also to insert your ISP DNS server or Google DNS Click OK Step 5: Click OK Step 6: Go to your secondary DNS server manager and expand the machine name.  Right-click Forward Look Up Zones and scroll down the menu. Click New Zone Step 7: Click Next Step 8: Choose Primary zone and click Next Step 9: Provide the zone name and click Next Step 10: Choose to create the zone file with the suggested name and click Next. Step 11: Select "Do not allow Dynamic Updates" and c lick Next. Step 12: Click Finish to create the new DNS zone. Step 13: Right-click the zone you just created and scroll down the menu. Click New Host ( A or AAAA) Step 14: Provide the name and IP address of this host and click Add Host Step 15: Click OK to create the A-Record in the DNS zone. Step 16: Go to your client machine and configure the DNS settings. Provide the IP address of your primary DNS server in Preferred DNS server field Step 17: Open Command prompt at your client machine and type nslookup www.test.com (the host you entered in test.com zone). Conclusion Great, you have setup a DNS forwarder and tested the configuration. If a domain name www.test.com is resolved successfully, then the DNS forwarder is working.
  • davefollmer
    3 hours ago

    Hi, This has been a problem for a long time but I never gave it any attention, now that I have a SSD I wan't to try to fix this. To be more specific, whenever I boot or reboot my pc it boots then it shows the message "Hard drive is not detected" then it reboots and boots just fine with no error messages, I wan't to know If there is a way to fix this. My motherboard is a Asus P8P67 B3 Revision, the drives are plugged in the grey ports, my bios is the latest version I could find (3602), my voltages are also fine and If i just plug in the ssd I still get the same result. Please help. Thanks! I didn't find the right solution from the Internet. References: https://wwwetected-then-restarts-and-detects-it/ healthcare product marketing
  • Tarek ElJammal
    Apr 19

    Imagine an ordinary day: You show up to work, you pour yourself a cup of coffee, and you have a quick water cooler chat with Anna from Sales. Then, suddenly, someone sounds the alarm—a critical Point-of-Sale application has been lost or an aging on-prem server has gasped its last breath. Are you truly prepared to respond? In this age of 24/7/365 availability expectations, you simply can’t afford to be down. That’s where the successful implementation of a cloud backup and disaster recovery solution comes in. So, is a cloud solution right for you? And, if so, how do you choose and successfully implement that solution? Like most things in life, the devil’s in the details. Let’s take a look. Is a cloud solution right for your organization? To get to that answer, you first need to thoroughly map your organization’s environment—and document the availability requirements for each of your servers, applications, and data. Too often, people don’t fully understand what systems they have in-house and what operating system versions they’re running—not to mention whether they’re physical or virtual. It’s critical that you take this time to ensure your documentation is thorough. Web-based applications are often served to you by three different servers, for example: A database server, a web server, and an application server. So, be sure to look under the hood and identify all of the components that need to be backed up. Then consider these questions carefully: Do you have enough bandwidth to ensure you can successfully complete backups to the cloud? Where do you intend to keep your backups? We, of course, recommend organizations maintain backups both on-prem and offsite — whether that’s at a secondary data center or in the cloud. (It’s this redundancy that will help ensure you’re able to recover should you fall victim to a local disaster or hardware failure.) And, if you’re looking to move your data offsite without the added expense of the staff, offsite location, and infrastructure required by a secondary data center, a cloud solution may be the right choice for you. Choosing the cloud backup and disaster recovery solution that’s your best fit So, you’ve determined that you want to deploy a direct-to-cloud or cloud hybrid solution and you’ve done some initial research. Next up: Reaching out to cloud backup and disaster recovery vendors and assessing potential solutions. To ensure you find a solution that both meets your needs and doesn’t hit you with surprise added costs, we encourage you to ask these questions: What platforms do you support—virtual, physical, or both? What operating systems do you protect—Windows-only or Linux and Mac, as well? What level of backup granularity do you offer—can I backup individual files and folders or do I have to backup the whole system? How is my data secured in flight and in the cloud? Where are your data centers located? What is your licensing model? Do you charge for bandwidth or storage capacity only? What level of support can I expect? Is it delivered by phone, chat, or email? How scalable is your solution — can I easily expand my capacity to accommodate mergers, acquisitions, or significant data growth? Does this solution comply with mandates that are relevant to my business? With this information at hand, you can better assess your prospective solutions to determine which is the right fit for your business. Of course, before you sign on the dotted line, we highly recommend that you take the time to run a trial version of your prospective solution. Only then will you gain a full understanding of how it will work and whether or not it truly meets your needs. Ensuring a successful cloud implementation with DR testing So, you’ve found a cloud backup and disaster recovery solution that delivers against your business requirements without breaking the bank. Now, it’s time to implement your solution. This is where we urge you to give yourself time to thoroughly test and validate your disaster recovery process. Unfortunately, too many organizations focus purely on backup—and don’t test the recoverability of their data. They assume that, since they’re paying their bills on time, their data will be easily recoverable when disaster strikes. Please don’t make that assumption. Run those DR tests and ask yourself: Can I spin up a virtual instance of a server in the cloud—and connect to it? Can I restore to my on-prem server quickly and efficiently? Can I easily failback? Of course, what constitutes as adequate DR testing varies from business to business, but we recommend you consider: A partial DR test at least every six months A full DR test every year Your cloud solution can be a lifesaver Acronis Data Cloud is a cloud-based backup and disaster recovery solution that delivers affordable, easy-to-implement backup redundancy. What’s more, it can empower you to spin up virtual servers and restore on-prem, as needed—helping you ensure business continuity and mitigate data loss. After all, hardware will fail. Storms will happen. In troubled areas, war can rage. Ransomware will pay you an unwelcome visit. It pays to be prepared.