ransomware – Computer Security Articles

First Node.js-based Ransomware : Nodera

January 22, 2020 admin 0 Comments BTC, encrypted, encryption, microsoft windows, NodeJS, ransomware

Credit to Author: Ravi Gidwani| Date: Wed, 22 Jan 2020 11:12:25 +0000

Recently while threat hunting, Quick Heal Security Labs came across an unusual Node.js framework based Nodera ransomware. The use of Node.js framework is not seen commonly across malware families. Latest development by threat actors reveal a nasty and one-of-its-kind ransomware being created; one that uses Node.js framework, which enables it to infect Windows…

QuickHeal Security

STOP (Djvu) Ransomware: Ransom For Your Shady Habits!

January 15, 2020 admin _readme.txt, {1d6fc66e-d1f3-422c-8a53-c0bbcf3d900d}, {36a698b9-d67c-4e07-be82-0ec5b14b4df5}, crack software, cracked, djvu, encryption, fake apps, icacls, infostealer, keygen, malware, offline key, online key, Powershell, ransomware, salsa20, stop, syshelper, time trigger task, timetriggertask, Vidar, vilsel, Windows update

Credit to Author: Jayesh kulkarni| Date: Wed, 15 Jan 2020 14:13:09 +0000

With almost 200 extensions, STOP (djvu) ransomware can be said to be 2019’s most active and widespread ransomware. Although this ransomware was active a year before, it started its campaign aggressively in early 2019. To evade detection, it has been continuously changing its extensions and payloads. For earlier infections, data…

MalwareBytes Security

A week in security (January 6 – 12)

January 13, 2020 admin a week in security, CES, ces 2020, consumer electronics show, education cybersecurity, google, Phobos, phobos ransomware, pre-installed mobile malware, ransomware, retail industry, ring, search industry, TikTok

Credit to Author: Malwarebytes Labs| Date: Mon, 13 Jan 2020 16:29:59 +0000

A cybersecurity news roundup from January 6–12, with a look at Phobos ransomware and a discovery of pre-installed malware on government-funded phones.

Categories:

A week in security

Tags: CES CES 2020 Consumer Electronics Show education cybersecurity Google Phobos Phobos ransomware pre-installed mobile malware ransomware retail industry Ring search industry tiktok

(Read more…)

The post A week in security (January 6 – 12) appeared first on Malwarebytes Labs.

MalwareBytes Security

Threat spotlight: Phobos ransomware lives up to its name

January 10, 2020 admin brute force, coveware, crysis, crysis ransomware, dharma, Dharma Ransomware, disorganised crime, mfa, Multi-Factor Authorization, Phobos, phobos nextgen, phobos notdharma, phobos ransomware, raas, ransomware, Ransomware as a Service, RDP, Remote Desktop Protocol, server message block, SMB, Sodinokibi, threat spotlight, virtual private networks, VPN

Credit to Author: Jovi Umawing| Date: Fri, 10 Jan 2020 18:04:44 +0000

Phobos, which many believe was named after the Greek god of fear, isn’t as widespread as it was before nor is it more novel than your average ransomware. Yet, it remains a threat to consumers and businesses alike. We dive into Phobos ransomware and show users how to face their fears and protect against it.

Categories:

Threat spotlight

Tags: brute force coveware crysis crysis ransomware dharma Dharma ransomware disorganised crime mfa Multi-Factor Authorization Phobos Phobos NextGen Phobos NotDharma Phobos ransomware raas ransomware Ransomware as a Service rdp remote desktop protocol Server Message Block SMB Sodinokibi virtual private networks vpn

Independent Krebs

The Hidden Cost of Ransomware: Wholesale Password Theft

January 6, 2020 admin A Little Sunshine, alex holden, Hold Security, karen christianson, mark schafer, ransomware, ryuk, sva consulting, The Coming Storm, vcpi

Credit to Author: BrianKrebs| Date: Mon, 06 Jan 2020 18:17:21 +0000

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients.

Kaspersky Security

Snow White, the Seven Cryptominers, and the targeted attacks

January 4, 2020 admin bitcoin, Business, cryptomalware, fairy tales, ransomware, SMB, Targeted Attacks, truth

Credit to Author: Nikolay Pankov| Date: Sat, 04 Jan 2020 11:19:06 +0000

The Brothers Grimm fairy tales are deep source of object lessons in information security — not just for children, but also for adults.

Security Sophos

Ransomware: la minaccia informatica che non morirà

January 2, 2020 admin Intercept X, ransomware, Ransomwares, sophos managed threat response (mtr), XG Firewall

Credit to Author: Sophos Italia| Date: Mon, 16 Dec 2019 07:17:12 +0000

Potrebbe essere in circolazione da 30 anni, ma il ransomware continua a evolversi e mettere in ginocchio le organizzazioni. Assicurati di essere pronto per questo.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/eZuW02Zyh8Q” height=”1″ width=”1″ alt=””/>

Security Sophos

Il ransomware Snatch riavvia i PC in Safe Mode per bypassare la protezione

January 2, 2020 admin Attualità, ransomware, Ransomwares, snatch

Credit to Author: Tiziana Carboni| Date: Fri, 13 Dec 2019 08:02:19 +0000

Un report analizza in dettaglio le tattiche, le tecniche e le procedure usate da Snatch, che comprendono il riavvio dei PC in Safe Mode<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/3TO_HwrNLPQ” height=”1″ width=”1″ alt=””/>

← Previous