January 13, 2017 By Catalin Cimpanu
Security researchers have gained access to one of the servers used by the Cerber gang, from where they were able to extract basic statistics about their operation.
A security researcher that only goes by the nickname of Racco42 discovered the vulnerability on Thursday, January 12.
The issue affected only one Cerber server, not all, and was most likely due to a misconfiguration. The server wasn't a command and control server, but a mere staging server from where the victims' computers would connect and download the actual ransomware, which would later run and infect their PCs.
Map of Cerber infections [Avast]
Full Article
Well, it is good to know that even the miscreants can slip up from time to time (not often enough though) and hopefully the relevant authorities and experts can maximise the use of the information gleaned to in some way further disrupt/interdict this crapware's effects and the miscreants operations. :D
Reply
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.