Microsoft's prediction: Ransomware like Cryptolocker will hit harder in 2014
My (explanoit's) take:
In a post to Microsoft's Security Blog on December 11th, Microsoft makes it clear it thinks ransomware is a big deal. It's on a list of 8 major predictions their top security employees have for the coming year 2014. Cryptolocker has already shown the incredible danger this threat poses to users and businesses in one of the most interesting developments of 2013. Ransomware has always had a place, but the implementation of well architectured cryptography and Bitcoin as a minimally traceable way to extract funds makes ignoring it now impossible.
Personally, I have heard from PC repair shop and IT support businesses saying they have had many customers devastated by Cryptolocker. In addition, someone I have spoken who work closely with large corporations and the government regarding cybercrime says that officials are serious about this surging class of threat.
Combining resurgent ransomware and the abandonment of fixing Windows XP security bugs makes for a very dangerous environment for anyone left behind. Do not be that person. If you are not running at least Windows Vista you are in danger come August 2014.
Full Article
Microsoft's prediction: Ransomware like Cryptolocker will hit harder in 2014
Userlevel 7
+6
Userlevel 7
I believe it. Especially around the holidays with so many people ordering stuff online. One email version of Cryptoplocker pretends to be an invoice from Amazon.com or some other large retailer, with the invoice enclosed of an order that is supposedly about to be dispatched.
Of course, the "invoice" is an .exe file. You know the rest!
Of course, the "invoice" is an .exe file. You know the rest!
Userlevel 7
+7
Great information .....and sadly many many many will ignore! I did not know Bitcoin had involvment, but I know now. Correct me if I am wrong; I just last week read from another forum that Microsoft would suspend support for XP in April 2014 and he (a community leader) said to be specific.....08 April 2014. So, I will be waiting to get our response and thank you for all the great posts. I feel educated when I find one of your in-depth posts.
Userlevel 2
We have implemented group policy restrictions. Takes care of it all. Also using OpenDNS provides great protection. HitmanPro.Alert now with CryptoGaurd is great along with CrytoPrevent.
http://www.surfright.nl/en/alert
http://www.fooli**bleep**.com/vb6-projects/cryptoprevent/
But the best defense is to have ALL you data backed up onto an external HDD or the cloud. Shadow Explorer can get your files back once encypted but its time consuming.
http://www.surfright.nl/en/alert
http://www.fooli**bleep**.com/vb6-projects/cryptoprevent/
But the best defense is to have ALL you data backed up onto an external HDD or the cloud. Shadow Explorer can get your files back once encypted but its time consuming.
Userlevel 7
Shadow Copy cant recover the files if the VSS has been disabled by the infection (which most of the new variants do). Pretty much all the variants of Crypto will change local versions of files which are then uploaded to the cloud backups so that isnt the best way to keep yourself safe either.
Userlevel 2
I am not worried about my local cloud files. I can still go into my Google Drive via the web and get everything back. But that is also why I backup to my external HDD twice a week. Google drive files are encrypted. Here is a great tutorial featuring Shadow Explorer.
http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information
Using something like HitmanPro.Alert or CryptoPrevent is a great means of hardening your system for FREE.
http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information
Using something like HitmanPro.Alert or CryptoPrevent is a great means of hardening your system for FREE.
Userlevel 7
The following is a update on Cryptolocker
Time’s up! CryptoLocker ransomware is back in business
By Wayne Williams Posted on 24 June 2014
CryptoLocker recently had something of a setback when law enforcement agencies managed to seize control of servers running it and the GameOver Zeus botnet. Britain's National Crime Agency (NCA) declared this would give computer users a unique two week opportunity to secure their systems, which seemed a rather precise claim.
It turns out that prediction wasn’t too far off the mark. Three weeks after that warning, and CryptoLocker is indeed making its return, this time as a standalone threat. The new strain does not rely on 2048-bit RSA encryption nor need a Command and Control server to work
betanews/ full read here/ http://betanews.com/2014/06/24/times-up-cryptolocker-ransomware-is-back-in-business/
Time’s up! CryptoLocker ransomware is back in business
By Wayne Williams Posted on 24 June 2014
CryptoLocker recently had something of a setback when law enforcement agencies managed to seize control of servers running it and the GameOver Zeus botnet. Britain's National Crime Agency (NCA) declared this would give computer users a unique two week opportunity to secure their systems, which seemed a rather precise claim.
It turns out that prediction wasn’t too far off the mark. Three weeks after that warning, and CryptoLocker is indeed making its return, this time as a standalone threat. The new strain does not rely on 2048-bit RSA encryption nor need a Command and Control server to work
betanews/ full read here/ http://betanews.com/2014/06/24/times-up-cryptolocker-ransomware-is-back-in-business/
Reply
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.