Yesterday, two major Spanish were ransomware . The attacks took place on the same day, which reminded many experts attacks that caused major problems for many companies in 2017.
WannaCry was first discovered on May 12, 2017. One of the first countries to be affected was Spain (along with the United Kingdom). WannaCry was then used to carry out attacks on the Spanish newspaper El Mundo and the internet service provider Telefonica .
However, the evidence so far suggests that yesterday's attacks are not part of a large global campaign, like WannaCry. So far, only two companies have been affected.
The first company is called Everis. It is an IT consulting company and is part of NTT Data Group. The second victim is Cadena SER, Spain's largest radio network. Both companies reported the breach themselves. The radio network made the announcement via its official website .
Both companies advised their employees to shut down computers and disconnect their systems from the internet.
The attack had the biggest impact on the IT company, as all its branches were affected. Everis has more than 24,500 employees in 18 countries. Evidence so far shows that the ransomware spread through the internal network , affecting all the company's systems in all 18 countries.
Everis employees posted screenshots on social media showing that the ransomware that hit the company is a variant of the BitPaymer, the same malware that was previously used to attack French television station M6 and German company Pilz.
As for the Cadena SER radio network, no information about the ransomware.
As we mentioned above, Spain was one of the first targets of the WannaCry campaign. For this reason, the government has taken measures and was able to react immediately to yesterday's attacks.
Spain's National Security Ministry issued a list of tips cybersecurity Institute . within hours of the incidents. It also asked all companies to take appropriate measures and improve their security practices . It also urged any other victims to contact INCIBE , Spain's National Cyber-Security
The two attacks certainly didn't have the devastating impact of the WannaCry ransomware, but they managed to cause panic among local companies and bring back unpleasant memories. Many companies use software , and some of them fear that they may have been infected themselves.
Additionally, there are rumors that other IT companies have also been affected. These rumors forced several companies, such as KPMG and Accenture, to post a statement on Twitter to reassure their customers that everything is working properly.
