{"id":8063,"date":"2017-06-27T10:31:29","date_gmt":"2017-06-27T18:31:29","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/06\/27\/news-1840\/"},"modified":"2017-06-27T10:31:29","modified_gmt":"2017-06-27T18:31:29","slug":"news-1840","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/06\/27\/news-1840\/","title":{"rendered":"New ransomware outbreak"},"content":{"rendered":"

Credit to Author: Marvin the Robot| Date: Tue, 27 Jun 2017 17:42:39 +0000<\/strong><\/p>\n

Just a few hours ago, a global ransomware outbreak began, and it looks to be as big as the WannaCry story<\/a> that broke not so long ago.<\/p>\n

\"New<\/a> <\/p>\n

Those few hours were enough for several large companies from different countries to report infection, and the magnitude of the epidemic is likely to grow even more.<\/p>\n

It’s not yet clear what exactly the new ransomware is. Some thought it might be either some variation of Petya<\/a> (be it Petya.A, Petya.D, or PetrWrap<\/a>), or that it could be WannaCry (it’s not). Kaspersky Lab experts are now investigating this new threat, and as soon they come up with solid facts, we’ll update this post.<\/p>\n

This appears to be a complex attack which involves several attack vectors. We can confirm that a modified EternalBlue exploit is used for propagation at least within corporate networks.<\/p>\n

\"\"<\/a> <\/p>\n

For now, know that Kaspersky Lab’s products detect the new ransomware using Kaspersky Security Network (KSN) with a verdict UDS:DangerousObject.Multi.Generic. Here’s what we recommend our customers do:<\/p>\n

    \n
  1. Make sure that the Kaspersky Security Network and System Watcher components are turned on.<\/li>\n
  2. Manually update the antivirus databases immediately<\/b>. It’s also worth updating them several times in the next few hours.<\/li>\n
  3. As an additional means of protection, you can also use the AppLocker feature to disable execution of a file called perfc.dat<\/i> and the PSExec utility from the Sysinternals Suite.<\/li>\n
  4. Install all security updates for Windows. The one that fixes bugs exploited by EternalBlue is especially important. Here we explain how to do it<\/a>.<\/li>\n<\/ol>\n


    https:\/\/blog.kaspersky.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Credit to Author: Marvin the Robot| Date: Tue, 27 Jun 2017 17:42:39 +0000<\/strong><\/p>\n

    A new ransomware outbreak is happening right now. Here’s what we know so far and what you can do to protect yourself from the threat.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10425,10378],"tags":[12821,12290,12822,32,12288,12823,3765,714,10438,12269,12252],"class_list":["post-8063","post","type-post","status-publish","format-standard","hentry","category-kaspersky","category-security","tag-blockers","tag-cryptors","tag-epidemics","tag-news","tag-outbreak","tag-petya","tag-ransomware","tag-security","tag-threats","tag-trojans","tag-wannacry"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=8063"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8063\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=8063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=8063"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=8063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}