Cyberattack havoc could grow as work week begins

An unprecedented “ransomware” cyberattack that has already hit tens of thousands of victims in 150 countries could wreak even more havoc Monday as people return to their desks and power up their computers at the start of the work week.

Officials and experts on Sunday urged organizations and companies to update their operating systems immediately to ensure they aren’t vulnerable to a second, more powerful version of the malicious software, dubbed WannaCry. The cyberattack paralyzed computers that run Britain’s hospital network, Germany’s national railway and scores of other companies and government agencies worldwide.

The attack, already believed to be the biggest online extortion scheme ever recorded, is an “escalating threat” after hitting 200,000 victims across the world since Friday, according to the head of Europol, Europe’s policing agency.

“At the moment, we are in the face of an escalating threat,” director Rob Wainwright told Britain’s ITV. “The numbers are going up, I am worried about how the numbers will continue to grow when people go to work and turn [on] their machines on Monday morning.”

His concerns were echoed by James Clapper, former director of national intelligence under U.S. President Barack Obama. In an interview on ABC’s This Week, Clapper said the worry was “this ransomware attack will be even larger” as people return to their desks after the weekend.

The 200,000 victims included more than 100,000 organizations, Europol spokesman Jan Op Gen Oorth told The Associated Press. He said it was too early to say who was behind the onslaught and what their motivation was, aside from the obvious demand for money. So far, he said, not many people have paid the ransom demanded by the malware.

The attack held users hostage by freezing their computers, encrypting their data and demanding money through online bitcoin payment — $300 US at first, rising to $600 before it destroys files hours later.

Account addresses hard-coded into the malicious WannaCry software code appear to show the attackers had received just under $32,500 as of Sunday.

The effects were felt across the globe, with Britain’s National Health Service, Russia’s Interior Ministry and companies including Spain’s Telefonica, FedEx Corp. in the U.S. and French carmaker Renault all reporting disruptions.