{"id":10067,"date":"2017-10-24T15:10:27","date_gmt":"2017-10-24T23:10:27","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/10\/24\/news-3840\/"},"modified":"2017-10-24T15:10:27","modified_gmt":"2017-10-24T23:10:27","slug":"news-3840","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/10\/24\/news-3840\/","title":{"rendered":"BadRabbit ransomware strikes Eastern Europe"},"content":{"rendered":"

Credit to Author: Malwarebytes Labs| Date: Tue, 24 Oct 2017 21:53:05 +0000<\/strong><\/p>\n

A new strain of ransomware called BadRabbit is spreading through Eastern Europe. Likely created by the same authors as the Petya\/Not Petya ransomware<\/a> outbreak in June, BadRabbit ransomware uses a website to drop a fake Flash update and then drops its payload.<\/p>\n

Click to view slideshow.<\/a> <\/p>\n

Countries we know to be impacted so far are Russia, Ukraine, Turkey, Bulgaria, and Germany, with attacks centered on targets as wide-ranging as infrastructure, transportation, and media outlets. It is unknown at this time whether the attack will continue to spread, but it does have the same capacity for lateral infection (the ability to move deeper into a network and gain additional points of control) as the Petya\/Not Petya ransomware.<\/p>\n

Below is a view of the pay screen for Bad Rabbit, including its fascinating animated text. This is the most intricate pay screen we’ve ever seen, although it doesn’t seem to add any new functionality.<\/p>\n

\"\"<\/p>\n

Cybercriminals are asking for 0.05 bitcoins, or $280,<\/a> in return for the ransomed files. Customers of Malwarebytes for Windows<\/a> are already protected from this threat. Malwarebytes detects it as Ransom.BadRabbit.<\/p>\n

\"bad<\/p>\n

Concerned citizens who don’t have anti-ransomware technology should back up their most important files now (either to the cloud or to an external drive, which should be ejected after the backup is complete to avoid infection). Those who do have this type of security should be sure to run all updates and turn on real-time protection, if not already activated.<\/p>\n

Folks looking for a deeper technical dive into BadRabbit stay tuned. We’ll update this post with a link to our research once it’s complete.<\/p>\n

The post BadRabbit ransomware strikes Eastern Europe<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Malwarebytes Labs| Date: Tue, 24 Oct 2017 21:53:05 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
A new strain of malware by the authors of NotPetya called the BadRabbit ransomware is spreading through Eastern Europe, offering a fake Flash update to drop the infection.<\/p>\n

Categories: <\/p>\n