Discussion in 'malware problems & news' started by ronjor, Mar 31, 2016.
Here is a list of recent variants
US and Canada issue joint alert after rash of cyber attacks against hospitals
Of course these attacks are going to get much worse. The hospitals have always paid the ransom.
So Mr. Hospital Administrator, you better start allocating in the hundreds of thousands of dollars for like payments since that where these ransom requests are headed.
Ransomware Epidemy Makes Two New Victims, Hospitals in California and Indiana
Ironically, the IT guy's know what to do to mitigate the damage, but are getting fought tooth and nail, by the doctors who don't want to be inconvenienced. As long as the doctors persist, hospitals are going to be a good feeding ground
Whose behind all these U.S. targeted ransomware attacks?
Satellite based ransomware attacks: http://www.spambotsecurity.com/forum/viewtopic.php?f=7&t=3797
Ransomware Hits 20 Schools in Texas District
"ID Ransomware" Website Helps Identify Ransomware Infections
Meet the Cryptoworm, the Future of Ransomware
And a big thanks to the likes of Sandboxie and ShadowDefender
Jigsaw Ransomware Threatens to Delete Your Files, Free Decrypter Available
Yes I agree. Unfortunately not many people and companies use such defenses. In most cases backup inaccessible to regular users is only way to restore data. Or to pay up.
True, and you either use and learn the proper defenses, or you pay. Hmm, sounds like life itself
Interesting posting over at bleepingcomputer.com on a ransomware using legit encryption software, AxCrypt, to encrypt all files on a server. Unfortunately, AxCrypt is designed to be unbreakable and without a key is impossible to break:
The basic rule is: If you lose or forget your passphrase or key-file, your documents are lost. There is no back-door into AxCrypt.
The only way to recover a lost passphrase is to try all likely combinations. If you have used a key-file, and lost that, there is nothing to do at all - the number of combinations is simply too large. That is why you must print a paper backup copy if you use key-files.
Web shell based. These guys are getting more creative with each passing day.
Decrypter Available for AutoLocky, Locky Ransomware Copycat
New CryptXXX Ransomware Locks Your Files, Steals Bitcoin and Local Passwords
Latest Teslacrypt targets new file extensions, invests heavily in evasion
New CryptoBit Ransomware Could Be Decryptable
Separate names with a comma.