Almost all WannaCry victims were running Windows 7

[Brink]

One week after it first hit, researchers are getting a better handle on how the WannaCry ransomware spread so quickly — and judging from the early figures, the story seems to be almost entirely about Windows 7.

According to data released today by Kaspersky Lab, roughly 98 percent of the computers affected by the ransomware were running some version of Windows 7, with less than one in a thousand running Windows XP. 2008 R2 Server clients were also hit hard, making up just over 1 percent of infections...

Tweet

— Twitter API (@user) View on Twitter

Read more: Almost all WannaCry victims were running Windows 7 - The Verge

See also: Microsoft - Customer Guidance for WannaCrypt attacks - Windows 10 Forums

 

[mjf]

Was Windows 7 inherently vulnerable or was it chosen as the most widespread target in environments were security should have been better?

 

[CarlSD]

Probably not surprising considering Windows 7 is still the most widely used Microsoft OS worldwide.

And, even though Microsoft did release a security update for this back in March, a lot of people probably didn't patch possibly due to having Windows Update turned off completely to avoid Windows 10 during the GWX 'campaign' (which is still ongoing, in my opinion) and they never turned updates back on again or even bothered checking for updates any more.

 

[Brink]

Yep, basically a user issue not keeping Windows Updated.

 

[tetraps]

I'm guessing many Win 7 users have chosen to not update their PCs due to being alienated by GWX, snooping, etc.

Best approach is to install the security-only rollups then use Windows Update to get patches for .NET, Office, and other software.

 

[RoasterMen]

This is obviously the reason why the attackers chose Windows 7 users.

 

[MeOnMine]

It was probably arranged that way !

 

[michael diemer]

I've been doing the monthly security updates, and, as of this month IE as well. Is this sufficient? Or are there other vulnerabilities (Live Mail, Office, etc?).

 

[Brds7t7]

I've been doing the monthly security updates, and, as of this month IE as well. Is this sufficient? Or are there other vulnerabilities (Live Mail, Office, etc?).

I ditched live mail when MS stopped supporting it last year. Switched to Thunderbird now as it gets regular updates. Not sure I'd feel comfortable running any software which hasn't been updated in 5 years these days. I don't really know how much of a security risk live mail is though?

Plus, it didn't seem to handle IMAP well on one of my accounts. Never could work out why. Messages kept disappearing and reappearing and not synching properly. Haven't had any issues since I switched to TB though.

So long as you're keeping up to date with security updates (including IE even if it is disabled), and keeping all security software updated.

 

[Layback Bear]

Yes the attack was on Windows 7 because it is the most used.
The hacker gets a bigger bang for their buck.

Not Updating your system is the problem. The biggest reason some people are not updating Windows 7 was caused by Microsoft's beating users about the head and shoulder over that damn free W-10.

Both my system have all their needed updates, (rollups).
One system I had to do a Repair Install just to get Windows updates to work properly again. I had done so much tweaking just to stay away from W-10 I cause problems.

My systems are back to getting updates as they did before the W-10 (GWX) garbage.
What ever updates come from Microsoft concerning Windows 7 and security I install.
I leave drivers and such up to my inspection and choice.

So in my opinion Windows 7 updates are safe once again to install and I recommend doing so.

Jack

 

[ethel]

WannaCry

Hi Everyone, I am very relieved after my last re-install that I am able to install all of the Quality Monthly

Roll ups with no problems. I think if I had not been able to I would have ended up unplugging the Windows

7 machine. I am still using IE11 but it is fully updated, and working well.

 

[Seffrid]

I've been doing the monthly security updates, and, as of this month IE as well. Is this sufficient? Or are there other vulnerabilities (Live Mail, Office, etc?).

Office is still supported (depending on the version), and needs to be kept updated. While IE is still supported (again, depending on the version and OS) and needs to be kept updated because some applications rely on it, it really isn't recommended as the default browser these days - not least because it has security flaws that are constantly targeted.

Live Mail (and other such email clients) download the emails and their attachments from your ISP's mail server. The first security check should be by your ISP, and most spam/potential malware should be effectively filtered out on your webmail page - and shouldn't therefore be downloaded by an email client. If your ISP isn't doing that, you're using the wrong ISP.

Once an email containing an attachment has been downloaded to your email client such as Live Mail then it's down to you whether to open the attachment. If you don't know or trust the sender, don't open it. If the email looks in any way suspicious, don't open the attachment. If you do open an attachment and it asks you to click on a link or to provide personal or security etc information then don't, just delete it. If you do feel the need to visit the website the email refers to just in case it's genuine then do so from your browser, not from the link in the email or its attachment.

If you do open the attachment, then it should be effectively checked by your anti-virus/malware program which you must therefore keep updated. If that isn't happening then you're using the wrong anti-virus/malware program or you're not keeping it properly updated.

Live Mail or any other similar email client actually plays a very small part if any in the scrutiny of emails and their attachments - that's really down to you, your ISP, and your anti-virus/malware program. The OS also plays a small part in such things, as evidenced by the fact that the only OS that was largely unaffected by this ransomeware attack is the one that is no longer supported.

 

[Brian60077]

now this is concerning, since my elitebook has windows 7 pro on it....i do let it do the updates that come thru windows update....but wondering if i should install windows 10 on it just for security reasons....since windows 7 soon wont get updates

 

[Layback Bear]

Windows 7 will still be getting updates until 2020.

W-10 has it's own security problems.
What ever operating system you use it must be kept up to date or you will have problems.

Go to our sister forum and do some reading is my recommendation. It will give you some idea if you want to change.

Windows 10 Forums

Jack

 

[michael diemer]

Office is still supported (depending on the version), and needs to be kept updated. While IE is still supported (again, depending on the version and OS) and needs to be kept updated because some applications rely on it, it really isn't recommended as the default browser these days - not least because it has security flaws that are constantly targeted.

Live Mail (and other such email clients) download the emails and their attachments from your ISP's mail server. The first security check should be by your ISP, and most spam/potential malware should be effectively filtered out on your webmail page - and shouldn't therefore be downloaded by an email client. If your ISP isn't doing that, you're using the wrong ISP.

Once an email containing an attachment has been downloaded to your email client such as Live Mail then it's down to you whether to open the attachment. If you don't know or trust the sender, don't open it. If the email looks in any way suspicious, don't open the attachment. If you do open an attachment and it asks you to click on a link or to provide personal or security etc information then don't, just delete it. If you do feel the need to visit the website the email refers to just in case it's genuine then do so from your browser, not from the link in the email or its attachment.

If you do open the attachment, then it should be effectively checked by your anti-virus/malware program which you must therefore keep updated. If that isn't happening then you're using the wrong anti-virus/malware program or you're not keeping it properly updated.

Live Mail or any other similar email client actually plays a very small part if any in the scrutiny of emails and their attachments - that's really down to you, your ISP, and your anti-virus/malware program. The OS also plays a small part in such things, as evidenced by the fact that the only OS that was largely unaffected by this ransomeware attack is the one that is no longer supported.

Thanks for that great info. I have a good ISP which not only filters out spam and malware but also respects privacy and doesn't sell or disclose personal info to anyone. So I'm good there. I only need to update Office, I haven't been doing that but now I will. I am actually rarely online with Windows. I use Linux for that. And I only go online on my music computer occasionally and briefly, so I'm not worried there. I don't even have email on it. My main concern is in protecting the wife's laptop. Fortunately we are both pretty savvy,. I even report phishing attempts to paypal.

 

[lehnerus2000]

Not Surprising

Not surprising, as most desktops (worldwide) are running W7.

Also MS' has behaviour has guaranteed this outcome:

• The GWX fiascos encouraged lots of users to disable Windows Update
• To make sure WU wasn't turned back on MS switched to cumulative updates
• For additional insurance they made sure that everyone knew cumulative updates contained modified telemetry

Windows 7 will still be getting updates until 2020.

Some W7 machines have already been stopped from receiving updates by MS.
No Windows Updates in Windows 7 and 8 if CPU not Supported

 

[ThrashZone]

Hi,
Yep MS created the perfect storm

 

[RoasterMen]

And people with Kaby Lake or Ryzen systems use Windows 7 LOL

 

[ThrashZone]

Hi,
Nothing funny about using win-7 it is more stable than 10 is and the way MS is pushing drivers... it may always be that way

 

[goodlad]

Yes the attack was on Windows 7 because it is the most used.
The hacker gets a bigger bang for their buck.

Not Updating your system is the problem. The biggest reason some people are not updating Windows 7 was caused by Microsoft's beating users about the head and shoulder over that damn free W-10.

Both my system have all their needed updates, (rollups).
One system I had to do a Repair Install just to get Windows updates to work properly again. I had done so much tweaking just to stay away from W-10 I cause problems.

My systems are back to getting updates as they did before the W-10 (GWX) garbage.
What ever updates come from Microsoft concerning Windows 7 and security I install.
I leave drivers and such up to my inspection and choice.

So in my opinion Windows 7 updates are safe once again to install and I recommend doing so.

Jack

so you mean to say even those who choose not to update for over an year because of W10 mess, can download the updates safely now, with out worrying about any auto updates ?

As last I heard, one of my friend turned back updates on his W7 around a month or two back but he was kicked into w10 post updating.