Topics tagged under "malware"

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

NextCloud Introduces a Ransomware Protection App
News • nextcloud security malware ransomware • • mlnews

5

5
Posts

244
Views

@stuartjordan said in NextCloud Introduces a Ransomware Protection App:

That is Great to hear, they are constantly developing on the project.

They really are. It's very busy.
Battling Ransome/Crypto-ware: Drive Shares
IT Discussion • malware ransonware security secure access drive mapping cryptoware • • gjacobse

18

18
Posts

319
Views

Pretty sure that ShadowCopy is still time only.
WannaCry, Petya, What’s Next? Are You at Risk?
Scale Legion • scale out scale hc3 scale blog wannacry malware • • scale

1

1
Posts

246
Views

No one has replied
Windows 10 Immune to Petya
News • windows windows 7 windows 10 petya malware • • mlnews

1

1
Posts

108
Views

No one has replied
NotPetya Might Have Not Have Been an NSA Leak
News • nsa malware security • • mlnews

6

6
Posts

242
Views

After monitoring this new outbreak for 24 hours, I came to the conclusion we were dealing with cyber warfare, and not ransomware. Two separate reports coming from Comae Technologies and Kaspersky Lab experts confirm this now.

NotPetya is a destructive disk wiper similar to Shamoon which has been targeting Saudi Arabia in the recent past. Note that Shamoon actually deleted files, NotPetya goes about it slightly different, it does not delete any data but simply makes it unusable by locking the files and then throwing away the key. The end result is the same.

Someone is hijacking known ransomware families and using them to attack Ukrainian computer systems. Guess who.

You never had a chance to recover your files. There are several technical indicators that NotPetya was only made to look as ransomware as a smoke screen:
It never bothers to generate a valid infection ID The Master File Table gets overwritten and is not recoverable The author of the original Petya also made it clear NotPetya was not his work
This has actually happened earlier. Foreshadowing the NotPetya attack, the author of the AES-NI ransomware said in May he did not create the XData ransomware, which was also used in targeted attacks against Ukraine. Furthermore, both XData and NotPetya used the same distribution vector, the update servers of a Ukrainian accounting software maker.

Catalin Cimpanu, the Security News Editor for Bleepingcomputer stated: "The consensus on NotPetya has shifted dramatically in the past 24 hours, and nobody would be wrong to say that NotPetya is on the same level with Stuxnet and BlackEnergy, two malware families used for political purposes and for their destructive effects. Evidence is clearly mounting that NotPetya is a cyber-weapon and not just some overly-aggressive ransomware."

Cybersecurity has moved from tech to a CEO and Board-level business issue

You did not sign up for this, but today it is abundantly clear that as an IT pro you are have just found yourself on the front line of 21-st century cyber war. Cybersecurity has moved from tech to a CEO and Board-level business issue. I strongly suggest you have another look at your defense-in-depth, and make sure to:

Have weapons-grade backups
Religiously patch
Step users through new-school security awareness training.
[ALERT] Looks Like A New Worldwide Ransomware Outbreak
IT Discussion • security malware ransomware knowbe4 knowbe4 blog windows patching zero day • • stus

2

2
Posts

218
Views

@stus Thanks. Was just reading about it here.
CheckPoint Claims Recent Discovery of Old Malware
News • checkpoint microsoft malware trojan fireball ars technica • • mlnews

1

1
Posts

93
Views

No one has replied
PowerPoint Hovering Attack
News • powerpoint security trojan softpedia malware • • mlnews

3

3
Posts

166
Views

@EddieJennings said in PowerPoint Hovering Attack:

@mlnews Looks like the tl;dr is don't enable content unless you're 100% sure of the source.

Or download it. Or open it....
Patch Fast
IT Discussion • article scott alan miller patching smbitjournal malware security ransomware • • scottalanmiller

14

14
Posts

491
Views

Never used this but take a look...

http://www.smikar.com/
Telefonica Hit with Ransomware
News • malware security ransomware bleeping computer • • mlnews

17

17
Posts

647
Views

I mean I know it all sucks and it would be awesome if all the right people got all the right info and took all the right actions. but they don't and won't. So we need to push everyone that we can to do what they can. It's just what we have to work with.
IBM Accidentally Shipped USB Sticks with Malware to Storwize Customers
News • ibm storwize malware security el reg • • mlnews

1

1
Posts

130
Views

No one has replied
CIA Hacking Tools Identified in the Wild
News • cia security malware wikileaks vault7 ars technica • • mlnews

2

2
Posts

180
Views

Someone in the CIA is busy explaining to some congressional sponsors how their "no one will ever know it was us" isn't going as planned.
MS Word Zero Day Bug Puts Essentially All Windows Systems at Risk
News • word windows malware zero day ars technica • • mlnews

12

12
Posts

553
Views

@travisdh1 No, yeah that's a good point.

Just didn't think about it like that.
Wikileaks Publishes Details of the CIA's Grasshopper Windows Malware Maker
News • cia malware grasshopper ars technica wikileaks • • mlnews

1

1
Posts

116
Views

No one has replied
WikiLeaks Releases CIA Malware Codebase
News • wikileaks marble malware virus cia security • • mlnews

1

1
Posts

129
Views

No one has replied
virus cleanup-advise needed
IT Discussion • virus malware • • Ambarishrh

12

12
Posts

385
Views

@Ambarishrh said in virus cleanup-advise needed:

Can webroot help me here, thinking of using webroot and see if it can clean

Maybe. Anything "might" work. But you'll never know.
DNSMessenger malware
IT Discussion • dnsmessenger malware • • Danp

9

9
Posts

438
Views

@Dashrender said in DNSMessenger malware:

That's all fine and dandy my point was that this hack is currently worthless on its own it requires a previous hack in order to make this one work

The point is not how the infection was started. The point is that the infection itself is completely fileless. Never writing data to the disk.

There are multitudes of ways into a Windows system that an attacker could use to execute the initial code.
Database Ransom Attacks Now Include Hadoop and CouchDB
News • security couchdb hadoop malware ransomware hacking windows it pro • • mlnews

2

2
Posts

275
Views
[ALERT] Yikes, A New And Scary Double-Ransomware Whammy.
IT Discussion • ransim ransomware security malware knowbe4 • • stus

2

2
Posts

272
Views

Wow, that IS a scary one.
Why Advanced Ransomeware Is Cybercrimes Most Profitable Business Model
News • knowbe4 knowbe4 blog ransomware malware cybercrime security • • mlnews

1

1
Posts

131
Views

No one has replied
New Version Of Nymaim Malware Targets High-Level Managers
News • knowbe4 security malware ransomware trojan • • mlnews

1

1
Posts

158
Views

No one has replied
Lenovo Yoga 900 BIOS Update Allows Linux Installation
Water Closet • lenovo linux malware yoga • • nadnerB

1

1
Posts

132
Views

No one has replied
Nic Tolstoshev: Webroot on Security 2016
MangoCon • webroot nic tolstoshev security antivirus malware youtube • • steve

1

1
Posts

150
Views

No one has replied
Non-IT High Level Survey of Famous Malware
IT Discussion • malware scishow security • • scottalanmiller

3

3
Posts

307
Views

It's quite a good show, I watch it often. Good place for science news.
Flip Feng Shui Attacks KVM Memory Deduplication in Cloud Hosts
IT Discussion • ars technica kvm virtualization deduplication memory deduplication cloud computing security flip fend shui rowhammer malware • • mlnews

1

1
Posts

247
Views

No one has replied
Torch malware / browser?
IT Discussion • antivirus malware • • RojoLoco

7

7
Posts

414
Views

@BBigford said in Torch malware / browser?:

If we're talking about the same Torch, it's not malware. It has a torrent client embedded in it so that might be throwing up a flag.

Not to say it might be a phishing variant, or be compromised in another way. But the browser itself is fine (based on Chrome). Used it for a couple years before moving on.

I saw that there is a split on whether or not it is technically "malware", but that's not as much my concern. I just need to be able to positively tell the customer that it didn't come from our side (and I'm feeling pretty confident in that it did not).

And to my eyes, @BBigford, its behavior absolutely qualifies it as malware. Too much sneaky stuff going on when you use it, pop up ads all over the place, the use of the word "toolbar", etc, but I digress.
Lenovo Start Page Breached
IT Discussion • lenovo malware • • nadnerB

8

8
Posts

871
Views

@Dashrender said:

I'm curious, what percentage is sold in first world countries versus the rest of the world.

Yes, very good question. The percentages that I have seen are judged on "units shipped" not the amount of money spent on them. As Lenovo completely dominates the Chinese market, I am assuming that a major percentage of those units are sold there. I am also guessing that at least a fair percentage of their sales are very low cost devices. I know that they make Chromebooks and some entry level stuff even for the US market. They might be selling a fraction of the PCs by cost, even if leading in per unit volume.
M

Examples of Malware My Clients Once Fell Victim to Include...
IT Discussion • malware virus security • • MKM8DY

4

4
Posts

723
Views

@Dashrender said:

When I was first hanging my own shingle as an IT consultant we were suggesting to all of our clients that they should purchase and install AV everywhere.

Even in the 1990s that was ridiculous. How does someone manage to get enough money to start a business or hire an IT consultant but doesn't have the brain power to use AV?
Large Increase in TeslaCrypt Infections from WordPress Sources
News • security malware ransomware teslacrypt spiceworks knowbe4 • • mlnews

1

1
Posts

245
Views

No one has replied
File server got affected by .micro
IT Discussion • teslacrypt ransomware malware security • • RoopanKumar

16

16
Posts

1739
Views

@Reid-Cooper do have any documents for the steps to be taken or how this works. So i will recommended to download and check with it.

NextCloud Introduces a Ransomware Protection App News • nextcloud security malware ransomware • • mlnews

Battling Ransome/Crypto-ware: Drive Shares IT Discussion • malware ransonware security secure access drive mapping cryptoware • • gjacobse

WannaCry, Petya, What’s Next? Are You at Risk? Scale Legion • scale out scale hc3 scale blog wannacry malware • • scale

Windows 10 Immune to Petya News • windows windows 7 windows 10 petya malware • • mlnews

NotPetya Might Have Not Have Been an NSA Leak News • nsa malware security • • mlnews

[ALERT] Looks Like A New Worldwide Ransomware Outbreak IT Discussion • security malware ransomware knowbe4 knowbe4 blog windows patching zero day • • stus

CheckPoint Claims Recent Discovery of Old Malware News • checkpoint microsoft malware trojan fireball ars technica • • mlnews

PowerPoint Hovering Attack News • powerpoint security trojan softpedia malware • • mlnews

Patch Fast IT Discussion • article scott alan miller patching smbitjournal malware security ransomware • • scottalanmiller

Telefonica Hit with Ransomware News • malware security ransomware bleeping computer • • mlnews

IBM Accidentally Shipped USB Sticks with Malware to Storwize Customers News • ibm storwize malware security el reg • • mlnews

CIA Hacking Tools Identified in the Wild News • cia security malware wikileaks vault7 ars technica • • mlnews

MS Word Zero Day Bug Puts Essentially All Windows Systems at Risk News • word windows malware zero day ars technica • • mlnews

Wikileaks Publishes Details of the CIA's Grasshopper Windows Malware Maker News • cia malware grasshopper ars technica wikileaks • • mlnews

WikiLeaks Releases CIA Malware Codebase News • wikileaks marble malware virus cia security • • mlnews

virus cleanup-advise needed IT Discussion • virus malware • • Ambarishrh

DNSMessenger malware IT Discussion • dnsmessenger malware • • Danp

Database Ransom Attacks Now Include Hadoop and CouchDB News • security couchdb hadoop malware ransomware hacking windows it pro • • mlnews

[ALERT] Yikes, A New And Scary Double-Ransomware Whammy. IT Discussion • ransim ransomware security malware knowbe4 • • stus

Why Advanced Ransomeware Is Cybercrimes Most Profitable Business Model News • knowbe4 knowbe4 blog ransomware malware cybercrime security • • mlnews

New Version Of Nymaim Malware Targets High-Level Managers News • knowbe4 security malware ransomware trojan • • mlnews

Lenovo Yoga 900 BIOS Update Allows Linux Installation Water Closet • lenovo linux malware yoga • • nadnerB

Nic Tolstoshev: Webroot on Security 2016 MangoCon • webroot nic tolstoshev security antivirus malware youtube • • steve

Non-IT High Level Survey of Famous Malware IT Discussion • malware scishow security • • scottalanmiller

Flip Feng Shui Attacks KVM Memory Deduplication in Cloud Hosts IT Discussion • ars technica kvm virtualization deduplication memory deduplication cloud computing security flip fend shui rowhammer malware • • mlnews

Torch malware / browser? IT Discussion • antivirus malware • • RojoLoco

Lenovo Start Page Breached IT Discussion • lenovo malware • • nadnerB

Examples of Malware My Clients Once Fell Victim to Include... IT Discussion • malware virus security • • MKM8DY

Large Increase in TeslaCrypt Infections from WordPress Sources News • security malware ransomware teslacrypt spiceworks knowbe4 • • mlnews

File server got affected by .micro IT Discussion • teslacrypt ransomware malware security • • RoopanKumar

NextCloud Introduces a Ransomware Protection App
News • nextcloud security malware ransomware • • mlnews

Battling Ransome/Crypto-ware: Drive Shares
IT Discussion • malware ransonware security secure access drive mapping cryptoware • • gjacobse

WannaCry, Petya, What’s Next? Are You at Risk?
Scale Legion • scale out scale hc3 scale blog wannacry malware • • scale

Windows 10 Immune to Petya
News • windows windows 7 windows 10 petya malware • • mlnews

NotPetya Might Have Not Have Been an NSA Leak
News • nsa malware security • • mlnews

[ALERT] Looks Like A New Worldwide Ransomware Outbreak
IT Discussion • security malware ransomware knowbe4 knowbe4 blog windows patching zero day • • stus

CheckPoint Claims Recent Discovery of Old Malware
News • checkpoint microsoft malware trojan fireball ars technica • • mlnews

PowerPoint Hovering Attack
News • powerpoint security trojan softpedia malware • • mlnews

Patch Fast
IT Discussion • article scott alan miller patching smbitjournal malware security ransomware • • scottalanmiller

Telefonica Hit with Ransomware
News • malware security ransomware bleeping computer • • mlnews

IBM Accidentally Shipped USB Sticks with Malware to Storwize Customers
News • ibm storwize malware security el reg • • mlnews

CIA Hacking Tools Identified in the Wild
News • cia security malware wikileaks vault7 ars technica • • mlnews

MS Word Zero Day Bug Puts Essentially All Windows Systems at Risk
News • word windows malware zero day ars technica • • mlnews

Wikileaks Publishes Details of the CIA's Grasshopper Windows Malware Maker
News • cia malware grasshopper ars technica wikileaks • • mlnews

WikiLeaks Releases CIA Malware Codebase
News • wikileaks marble malware virus cia security • • mlnews

virus cleanup-advise needed
IT Discussion • virus malware • • Ambarishrh

DNSMessenger malware
IT Discussion • dnsmessenger malware • • Danp

Database Ransom Attacks Now Include Hadoop and CouchDB
News • security couchdb hadoop malware ransomware hacking windows it pro • • mlnews

[ALERT] Yikes, A New And Scary Double-Ransomware Whammy.
IT Discussion • ransim ransomware security malware knowbe4 • • stus

Why Advanced Ransomeware Is Cybercrimes Most Profitable Business Model
News • knowbe4 knowbe4 blog ransomware malware cybercrime security • • mlnews

New Version Of Nymaim Malware Targets High-Level Managers
News • knowbe4 security malware ransomware trojan • • mlnews

Lenovo Yoga 900 BIOS Update Allows Linux Installation
Water Closet • lenovo linux malware yoga • • nadnerB

Nic Tolstoshev: Webroot on Security 2016
MangoCon • webroot nic tolstoshev security antivirus malware youtube • • steve

Non-IT High Level Survey of Famous Malware
IT Discussion • malware scishow security • • scottalanmiller

Flip Feng Shui Attacks KVM Memory Deduplication in Cloud Hosts
IT Discussion • ars technica kvm virtualization deduplication memory deduplication cloud computing security flip fend shui rowhammer malware • • mlnews

Torch malware / browser?
IT Discussion • antivirus malware • • RojoLoco

Lenovo Start Page Breached
IT Discussion • lenovo malware • • nadnerB

Examples of Malware My Clients Once Fell Victim to Include...
IT Discussion • malware virus security • • MKM8DY

Large Increase in TeslaCrypt Infections from WordPress Sources
News • security malware ransomware teslacrypt spiceworks knowbe4 • • mlnews

File server got affected by .micro
IT Discussion • teslacrypt ransomware malware security • • RoopanKumar