Highlights
- Most ATMs run on (heavily limited) Windows XP
- Rumours circulating on WhatsApp are baseless
- RBI hasn't told any banks to close ATMs
ATMs in India aren’t susceptible to the Wanna Cry ransomware cyber attacks that spread like wildfire across the Internet over the past few days, as opposed to the rumours circulating in social circles, security experts say. The torrent of misinformation around the malware has given birth to rumours on WhatsApp, mostly in the form of regurgitated forwarded messages.
ATMs closed in India WhatsApp messages
And this other WhatsApp forward on the supposed global impact of Wanna Cry ‘virus’:
gnoring the obvious spelling errors, and its blatant lying to stoke fears around the Wanna Cry malware, it’s worth reminding our readers that no widespread case of ATMs getting impacted in India have been reported, just yet.
Are ATMs in India vulnerable to Wanna Cry cyber attacks?
Experts caution that though it is important for ATM providers to update their systems, they may not directly be at threat since the computers are heavily limited by their firmware.“Most ATMs in India use white-listing services to eliminate threats from malwares and worms within their internal networks,” [says] Saket Modi, CEO and co-founder of Lucideus, an IT risk assessment firm, told HT. “WannaCry doesn’t look like something that will affect the ATMs, unlike personal or corporate endpoints.”
Moreover, an RBI spokesperson clarified to India Today on Monday that it hadn’t told any banks to close ATMs: "RBI has not given any direction or issued any advisory to banks to shut down their ATMs. Wrong information is floating around that RBI has instructed banks to shut down ATMs.”
Though the rumours are ultimately baseless, they have been fuelled owing to the extent of the threat. According to unofficial estimates, between 50-70 percent of ATMs in India are using Windows XP, which stopped receiving updates from Microsoft three years ago. They were said to be the main target of the Wanna Cry malware cyber attacks, since Microsoft had already issued a patch that was designed to fix the vulnerabilities in newer versions of Windows.
Given the global impact of WannaCry, Microsoft has since issued an emergency patch for unsupported systems, but how many embedded systems like ATMs actually deploy this patch remains to be seen.
In addition, India’s IT minister Ravi Shankar Prasad sought to calm fears on Tuesday, stating the ransomware had ‘nearly zero’ impact in India. “After talking to Microsoft, we had asked people to install patch system in March,” Prasad told India TV. “This ongoing attack not only had minimum, but nearly zero percent impact, in India.”
Source:NDTV
New
Delhi | Bengaluru: Cyber security professionals worked round the clock
over the weekend, trying to protect corporate clients against what
experts are calling the biggest ransomware attack ever, before they open
for business Monday morning.
Cyber security firms told ET that though the impact on India from the Wanna-Cry onslaught has been relatively minimal so far, the real test will be on Monday when scores of professionals switch on their work systems.
A malic ..
Cyber security firms told ET that though the impact on India from the Wanna-Cry onslaught has been relatively minimal so far, the real test will be on Monday when scores of professionals switch on their work systems.
A malic ..
Comments
Post a Comment