Bad Rabbit and Fake Updates

Have you had a pop up appear on your screen that informs you your Adobe Flash, Java, or some other third party app needs an update? Sometimes these updates are malicious code. When you get a pop up like this, you need to shut off your computer, and then separately check the manufacturer’s website to obtain the update (if one does exist). A new strand of ransomware named Bad Rabbit is spreading via a fake Adobe Flash update. The initial installer masquerades as a Flash update but is an updated version of NotPetya. If you see a screen like this, DO NOT INSTALL! This is Bad Rabbit.

Recommendations for prevention:

• Apply all patches to operating systems

• Protect endpoints with an up-to-date anti-virus solution

• Promote robust password policies

• Ensure firewall and end point firmware is current

• Implement a network sandbox to discover and mitigate new threats

• Deploy a next-generation firewall with a gateway security subscription to stop known threats

• If you want more information or want to know if your network is protected, call the TIC help desk.