Submitted by admin on

WHAT HAPPENED?
A CoC computer was compromised and encrypted by the Locky ransomware virus.

 
WHEN DID IT HAPPEN?
It was discovered Thursday, April 28, 2016, at 8:30 AM.

 
WHY DID IT HAPPEN?
An un-requested email with an attached Word document was opened, which started the attack.  The email associated with this virus typically contains the following subject line: ATTN: Invoice_J-<8 digit string>

 
WHAT DO YOU NEED TO DO?
Avoid opening any un-requested attachments in emails.  If you are ever in doubt about an email or website, please contact the TSO Help Desk for assistance.

 
HAS THE ISSUE BEEN RESOLVED?
No.  TSO is working to clean the infected machine, but file recovery may not be possible.

 
WHO SHOULD YOU CONTACT FOR QUESTIONS?
Feel free to contact the TSO Help Desk (CCB 148, 404-894-7065, helpdesk@cc.gatech.edu).