Patcher/Filezip/Filecoder – data recovery and naming

Because of time issues, I added the malware ESET calls OSX/Filecoder.E to the Specific Ransomware Families and Types page but didn’t give it an article of its own here. Since there is important news (to potential victims) from Malwarebytes, I’m repairing that omission here. MARC-ETIENNE M.LÉVEILLÉ for ESET: New crypto-ransomware hits macOS – malware that calls itself ‘Patcher’, detected […] Continue reading Patcher/Filezip/Filecoder – data recovery and naming

Posted in SBN

Lockdroid’s text-to-speech unlocking

Catalin Cimpanu, for Bleeping Computer, details Lockdroid’s novel use of TTS functions as part of the post-payment unlocking process: Android Ransomware Asks Victims to Speak Unlock Code. Based on a report from Symantec that I haven’t seen yet. Lockdroid’s current campaigns appear to be focused on China, but that doesn’t mean its innovations won’t be seen […] Continue reading Lockdroid’s text-to-speech unlocking

Kaspersky researcher on Russian ransomware ecosystem

Anton Ivanov for Kaspersky: A look into the Russian-speaking ransomware ecosystem. He says: One of the findings of our research is that 47 of the 60+ crypto ransomware families we’ve discovered in the last 12 months are related to Russian-speaking groups or individuals. And: While analyzing the attack statistics for 2016, we discovered that by the […] Continue reading Kaspersky researcher on Russian ransomware ecosystem

Posted in SBN

LogicLocker PoC ICS ransomware

An ICS attack – or rather a PoC simulation – from Georgia Institute of Technology, making a big splash at RSA. David Bisson for Tripwire: New Proof-of-Concept Ransomware Can Target PLCs at Industrial Sites Original Georgia Institute of Technology paper: Out of Control: Ransomware for Industrial Control Systems. “In this work, we develop the first known […] Continue reading LogicLocker PoC ICS ransomware

Backup and Ransomware

Ransomware isn’t the only reason to implement a good backup strategy – for home users as well as for businesses – but it’s a pretty good one, and these days you can’t afford a backup strategy that doesn’t take ransomware’s evil little ways into account. In an article for Graham Cluley’s blog, David Bisson offers […] Continue reading Backup and Ransomware

Posted in SBN

ESET: Key Insights & Key Card Ransomware

ESET’s WeLiveSecurity blog put together an article combining commentary from Stephen Cobb, Lysa Myers and myself: Ransomware: Key insights from infosec experts. Yesterday, the site also commented on a story – Austrian hotel experiences ‘ransomware of things attack’ – that I also touched upon for ITSecurity UK: Key Card Ransomware: News versus FUD. David Harley Continue reading ESET: Key Insights & Key Card Ransomware

Posted in SBN