Collaborate Disseminate
We recently discovered a new file-encrypting Trojan built as an ELF executable and intended to encrypt data on machines controlled by Linux-based operating systems. Continue reading RansomEXX Trojan attacks Linux systems
In the past year, Maze ransomware has become one of the most notorious malware families threatening businesses and large organizations. Continue reading Life of Maze ransomware
According to currently available information, in the attack on Garmin a targeted build of the Trojan WastedLocker was used. We have performed technical analysis of the Trojan sample. Continue reading WastedLocker: technical analysis
Welcome to ransomware in 2017 – the year global enterprises and industrial systems were added to the ever-growing list of victims, and targeted attackers started taking a serious interest in the threat. It was also a year of consistently high attack numbers, but limited innovation. Continue reading Kaspersky Security Bulletin – Story of the year 2017
Between January and September 2016 ransomware attacks on business increased three-fold –to the equivalent of an attack every 40 seconds. With the ransomware-as-a-service economy booming, and the launch of the NoMoreRansom project , Kaspersky Lab has named ransomware its key topic for 2016. Continue reading Kaspersky Security Bulletin 2016. Story of the year
Between January and September 2016 ransomware attacks on business increased three-fold –to the equivalent of an attack every 40 seconds. With the ransomware-as-a-service economy booming, and the launch of the NoMoreRansom project , Kaspersky Lab has named ransomware its key topic for 2016. Continue reading Kaspersky Security Bulletin 2016. Story of the year
We recently found that a new logic in the latest version of the Shade encryptor currently being spread widely within the territories of Russia and CIS. On the basis of this logic, the ransomware checks the computer for any involvement in accounting activities and, if the check is successful, installs remote control tools into the compromised system instead of encrypting the victim’s files. Continue reading Shade: not by encryption alone
Petya Trojan is an unusual hybrid of an MBR blocker and data encryptor: it prevents not only the operating system from booting but also blocks normal access to files located on the hard drives of the attacked system. Continue reading Petya: the two-in-one trojan
In February 2016, the Internet was shaken by an epidemic caused by the new ransomware Trojan Locky. The Trojan has been actively propagating up to the present day. Kaspersky Lab products have reported attempts to infect users with the Trojan in 114 countries around the world. Analysis of the samples has shown that this Trojan is a brand new ransomware threat, written from scratch. Continue reading Locky: the encryptor taking the world by storm