<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:10.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
color:black;
mso-fareast-language:JA;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.object
{mso-style-name:object;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><table class=MsoTableGrid border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse;border:none'><tr style='height:.8in'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:.8in'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;mso-fareast-language:EN-US'><img width=322 height=57 style='width:3.3541in;height:.5937in' id="Picture_x0020_1" src="cid:image002.jpg@01D2CD79.67B4E150"></span><span style='mso-fareast-language:EN-US'><o:p></o:p></span></p></td></tr><tr style='height:22.5pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:22.5pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Straight_x0020_Connector_x0020_5" o:spid="_x0000_s1026" type="#_x0000_t75" style='position:absolute;margin-left:-1.55pt;margin-top:13.6pt;width:459.75pt;height:2.25pt;z-index:251659264;visibility:visible;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:page'>
<v:imagedata src="cid:image003.png@01D2CD79.67B4E150" o:title="" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251659264;margin-left:-2px;margin-top:18px;width:613px;height:3px'><img width=613 height=3 style='width:6.3854in;height:.0312in' src="cid:image003.png@01D2CD79.67B4E150" v:shapes="Straight_x0020_Connector_x0020_5"></span><![endif]><b><span style='font-size:13.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>INTERNAL MEMO <o:p></o:p></span></b></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:5.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p></td></tr><tr style='height:12.6pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:12.6pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>May 15, 2017</span></b><span style='font-size:11.0pt'><o:p></o:p></span></p></td></tr><tr><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>Sent on behalf of the IT Division </span></b><span style='font-size:11.0pt'><o:p></o:p></span></p></td></tr><tr><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'> </span></b><span style='font-size:11.0pt'><o:p></o:p></span></p></td></tr><tr><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>SUBJECT: </span></b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>Ransomware Update from IT Division<b> </b></span><span style='font-size:11.0pt;color:#1F497D'><o:p></o:p></span></p></td></tr><tr style='height:4.0pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:4.0pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>CONTACT: </span></b><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>Help</span><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'> </span><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>Desk, x7155, <a href="mailto:helpdesk@jlab.org">helpdesk@jlab.org</a> </span><span style='font-size:11.0pt'><o:p></o:p></span></p></td></tr><tr style='height:5.85pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:5.85pt'><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:4.5pt;margin-bottom:.0001pt;text-indent:-4.5pt'><b><span style='font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'> </span></b><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'>A twist on the cyber criminal's tool of choice to extort money from people has recently been detected. It is known as "Wannacry" and it is a particularly nasty form of ransomware. More details can be found in this news article, at:</span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.nbcnews.com_news_us-2Dnews_blockbuster-2Dwannacry-2Dmalware-2Dcould-2Djust-2Dbe-2Dgetting-2Dstarted-2Dexperts-2Dn759356&d=DwMD-g&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ymBp262dRSuhU0FqjRmMUWXr-mNybFC-OlPi9EHdOsI&m=Eq1A5IhS4aY06yKLW-yw5vC_4B3eH1R4dec5-DXES7w&s=6tQL-M4fyaxE7CyX_bO23yjurfXUYbMq72gVgj4BIt4&e=">http://www.nbcnews.com/news/us-news/blockbuster-wannacry-malware-could-just-be-getting-started-experts-n759356</a></span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'>Jefferson Lab has been actively researching the impact this malware could have on us since last week. At this time, we believe we are in a good security position with limited exposure to the virus. Patches mitigating part of the problem were sent out in March and we're actively looking for any infections. So far, the code is only targeting Windows systems, but this could change at any time.</span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'> </span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'>In order to ensure that patches have been effectively installed, some Windows system may have to be remotely rebooted. The computer center will contact you before doing so if possible. Please ensure any JLab-owned, home-based computers or offsite JLab laptops have been patched and rebooted ASAP. If you need assistance to determine this, you may contact the IT Division Helpdesk at x7155 or <a href="mailto:helpdesk@jlab.org"><span style='color:blue'>helpdesk@jlab.org</span></a>. Please note that the Helpdesk option is only available for JLab owned computers.</span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'> </span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'>Unfortunately, this attack can succeed via several other methods. A phishing email or an infected website can both introduce the malware onto a user's computer. As always, the general advice to be careful about opening email and visiting unknown websites is very applicable here.</span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'> </span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt;font-family:"Helvetica",sans-serif'>If you notice anything strange with the operation of your computer, or see a Windows notification advising you of a problem, notify the IT Division Helpdesk, as soon as possible.</span><span style='font-size:11.0pt'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-size:11.0pt'><o:p> </o:p></span></p></td></tr><tr style='height:4.0pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:4.0pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt;text-align:justify'><b><span style='font-size:7.5pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></b></p><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:-4.5pt;margin-bottom:.0001pt;text-align:justify;text-indent:4.5pt'><b><span style='font-size:7.5pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></b></p></td></tr><tr style='height:7.65pt'><td width=593 valign=top style='width:444.9pt;padding:0in 5.4pt 0in 5.4pt;height:7.65pt'><p class=MsoNormal style='margin-bottom:0in;margin-bottom:.0001pt;text-align:justify'><b><span style='font-size:7.5pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>12000 JEFFERSON AVENUE • NEWPORT NEWS, VA 23606 • USA • WWW.JLAB.ORG<o:p></o:p></span></b></p></td></tr></table><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;mso-fareast-language:EN-US'> </span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p></div></body></html>