Ransomware Targeting COVID-19 Detected... National Police Agency Shares Interpol's "Purple Notice"

[Asia Economy Reporter Lee Gwan-joo] The police have issued a special warning after detecting a global 'ransomware' attack exploiting the spread of the novel coronavirus infection (COVID-19).

On the 6th, the National Police Agency announced that it shared the COVID-19-related 'Purple Notice' distributed by the Interpol General Secretariat to 194 member countries with domestic related agencies such as the Ministry of Health and Welfare (Central Disaster and Safety Countermeasures Headquarters), the Ministry of Science and ICT, and the Korea Internet & Security Agency (KISA).

The Interpol Purple Notice is one of Interpol's eight notices, along with the 'Red Notice,' issued for the purpose of sharing various crime methods. Korean police have issued a total of three Purple Notices regarding drug crimes and phone fraud methods, sharing crime information with Interpol member countries.

This Purple Notice was issued by the Interpol General Secretariat after detecting a global ransomware attack targeting major government facilities and hospitals related to COVID-19. It shares key methods, characteristics, and preventive measures worldwide due to concerns about the risk of ransomware attacks on institutions at the forefront of COVID-19 response.

According to the notice, ransomware attacks are mainly carried out through three methods: ▲malicious emails and attachments ▲inducing user privilege disruptions ▲exploiting vulnerabilities in legacy systems. Once ransomware infiltrates a system, it encrypts or deletes all documents and then demands money from the user. Regardless of whether the ransom is paid, most victims find it difficult to recover original files or restore the system.

To prevent this, Interpol recommends regular online and offline file backups, installation of related systems such as antivirus platforms, updating applications to the latest versions, strengthening email gateway security, refraining from checking suspicious emails or links, and network segmentation to protect sensitive information.

The National Police Agency notified domestic related agencies of the contents of this Purple Notice to raise awareness and also requested rapid dissemination to private medical institutions such as hospitals.

Jang Woo-sung, head of the Foreign Affairs Investigation Division at the National Police Agency, said, “Interpol is also making efforts to prevent and investigate various related crimes to support COVID-19 response,” adding, “We will continue active cooperative investigations with Interpol and other countries to respond to international crimes and share necessary information with domestic related agencies.”