Ransomware and Recent Variants

US and Canada issue joint alert after rash of cyber attacks against hospitals

http://www.rawstory.com/2016/03/us-...fter-rash-of-cyber-attacks-against-hospitals/

 

Of course these attacks are going to get much worse. The hospitals have always paid the ransom.

So Mr. Hospital Administrator, you better start allocating in the hundreds of thousands of dollars for like payments since that where these ransom requests are headed.

 

Ransomware Epidemy Makes Two New Victims, Hospitals in California and Indiana

http://news.softpedia.com/news/rans...pitals-in-california-and-indiana-502594.shtml

 

Whose behind all these U.S. targeted ransomware attacks?

http://wibqam.com/news/articles/201...-behind-us-ransomware-attacks-security-firms/

 

Satellite based ransomware attacks: http://www.spambotsecurity.com/forum/viewtopic.php?f=7&t=3797

 

Ransomware Hits 20 Schools in Texas District

http://news.softpedia.com/news/ransomware-hits-20-schools-in-texas-district-502761.shtml

 

"ID Ransomware" Website Helps Identify Ransomware Infections

http://news.softpedia.com/news/id-r...s-identify-ransomware-infections-502814.shtml

 

Meet the Cryptoworm, the Future of Ransomware

https://threatpost.com/meet-the-cryptoworm-the-future-of-ransomware

 

Jigsaw Ransomware Threatens to Delete Your Files, Free Decrypter Available

http://news.softpedia.com/news/jigs...r-files-free-decrypter-available-502824.shtml

 

Yes I agree. Unfortunately not many people and companies use such defenses. In most cases backup inaccessible to regular users is only way to restore data. Or to pay up.

 

Interesting posting over at bleepingcomputer.com on a ransomware using legit encryption software, AxCrypt, to encrypt all files on a server. Unfortunately, AxCrypt is designed to be unbreakable and without a key is impossible to break:

The basic rule is: If you lose or forget your passphrase or key-file, your documents are lost. There is no back-door into AxCrypt.

The only way to recover a lost passphrase is to try all likely combinations. If you have used a key-file, and lost that, there is nothing to do at all - the number of combinations is simply too large. That is why you must print a paper backup copy if you use key-files.

Ref.: http://www.bleepingcomputer.com/forums/t/609003/axcrypt-encrpyt-axx-ransomware/
​

 

Web shell based. These guys are getting more creative with each passing day.

 

Decrypter Available for AutoLocky, Locky Ransomware Copycat

http://news.softpedia.com/news/decr...tolocky-locky-ransomware-copycat-503053.shtml

 

New CryptXXX Ransomware Locks Your Files, Steals Bitcoin and Local Passwords

http://news.softpedia.com/news/new-...eals-bitcoin-and-local-passwords-503149.shtml

 

Latest Teslacrypt targets new file extensions, invests heavily in evasion

https://threatpost.com/latest-teslacrypt-targets-new-file-extensions-invests-heavily-in-evasion

 

New CryptoBit Ransomware Could Be Decryptable

http://news.softpedia.com/news/new-cryptobit-ransomware-could-be-decryptable-503239.shtml