Security Awareness Training Blog

Ransomware Blog

Keeping you updated on the latest ransomware attack vectors, strains, decryptors, families and trends to help you avoid becoming infected.

A Short History & Evolution of Ransomware

Ransomware attacks cause downtime, data loss, possible intellectual property theft, and in certain industries a ransomware attack is now looked at as a possible data breach. Ransomware is ...
Continue Reading

CTB-Locker Ransomware Uses Blockchain to Store & Deliver Decryption Keys

A mysterious update in the behavior of the CTB-Locker ransomware strain alerted security researchers to pull some strings and see what was going on. The CTB-Locker ransomware family, ...
Continue Reading

Ransomware On Pace To Be A 2016 $1 Billion Dollar Business

CNN Money reports about new estimates from the FBI that show the costs of ransomware have reached an all-time high this year. Threat actors made $209 million in the first quarter of 2016 ...
Continue Reading

They Shoot Files, Don't They? Jigsaw Ransomware Does...

By Eric Howes, KnowBe4 Principal Lab Researcher. A few days ago our friends at BleepingComputer.com announced the discovery of a new form of ransomware, which they dubbed Jigsaw ...
Continue Reading

Pinellas Man Falls Victim To Ransomware

Pinellas County resident Scott Germak thought he was getting free Tampa Bay Rays tickets based on a phishing email that appeared to be a legitimate message coming from GTE Financial, his ...
Continue Reading

The Future Of Ransomware: CryptoWorms?

Cisco's Talos Labs researchers had a look into the future and described how ransomware would evolve. It's a nightmare. They created a sophisticated framework for next-gen ransomware that ...
Continue Reading

CryptoHost Ransomware Locks Files In A Password Protected RAR File

A new ransomware strain called CryptoHost was discovered, which claims that it encrypts your data and then demands a ransom of .33 bitcoins to get your files back (~140 USD at the current ...
Continue Reading

Maktub Ransomware Knows Where You Live

It's happening in the UK today, and you can expect it in America tomorrow [correction- it's already happening today]. The bad guys in Eastern Europe are often using the U.K. as their beta ...
Continue Reading

More About Petya Hard Disk Lock BSoD Ransomware

[UPDATE April 10, 2016] Petya's ransomware's encryption has been defeated and a password generator has been released. See bottom of the post. March 25, news came out about a new type of ...
Continue Reading

It's CONFIRMED: MedStar Receives A Massive Ransomware Demand

It is now confirmed, The MedStar Hospital Chain was hit with ransomware and has received a digital ransom note. A Baltimore Sun reporter has seen a copy of the cybercriminal's demands. ...
Continue Reading

I am introducing a new phishing term: "Attackment"

Phishing attacks usually have a payload of infected attachments. With the recent ransomware attacks on hospitals I was asked for a press quote and the word "Attackment" suddenly came into ...
Continue Reading

Ransomware Attack Shuts Down Medstar Washington Hospital

The Washington Post reported that a ransomware infection penetrated the computer network of MedStar Health early Monday morning, forcing the Washington health care behemoth to shut down ...
Continue Reading

Survey: 62% of Companies Lack Confidence in Ability to Confront Ransomware Threat

Tripwire just published a new study which suggests that a majority of businesses might not be adequately prepared to either prevent or fully recover from ransomware infections. They ...
Continue Reading

New Ransomware Written In Windows PowerShell

Lucian Constantin at CSO had the scoop. A new ransomware program written in Windows PowerShell is being used in attacks against enterprises, including health care organizations, ...
Continue Reading

PETYA ransomware Locks Users Out by Overwriting Master Boot Record

Security researchers at Trend Micro have found a new type of ransomware that doesn’t encrypt specific files but makes the entire hard drive inaccessible. The malware has been named Petya ...
Continue Reading

New Maktub Ransomware Strain - Beautiful And Dangerous

Maktub Locker is the name of a new Russian strain of ransomware. The word Maktub is Arabic for "fate", suggesting it is inevitable you will get infected with ransomware. They have spent a ...
Continue Reading

Tampa Bay Business Owner Affected By Ransomware

Ransomware continues to be a successfull business for the cybercriminals of the world. It can easily get past even the best anti-virus software through a user just clicking once on ...
Continue Reading

TeamViewer Denies It Is Surprise Ransomware Infection Vector

A modified version of EDA2, an open source ransomware strain developed by Turkish computer engineering student Utku Sen, --by the way, thanks Utku, that was a very smart idea-- has been ...
Continue Reading

FBI and Microsoft Warn Against Hybrid Targeted Samas Ransomware Attack

The FBI and Microsoft have issued a new alert, a warning of hybrid targeted ransomware attacks that attempt to encrypt an organization’s entire network. This is a new approach where ...
Continue Reading

Chinese hackers behind U.S. ransomware attacks - security firms

Reuters was the first out with a story about criminal Chinese hackers also trying to get into the ransomware racket. They started out with: "Hackers using tactics and tools previously ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews