It's Here. New Locky Ransomware Hidden In Infected Word Files

Feb 17, 2016 7:44:24 AM By Stu Sjouwerman

[UPDATED FEB 22, 2016] It was only a matter of time, but some miscreant finally did it. There is a new ransomware strain somewhat amateurishly called "Locky", but this is professional ...

Ransomware Roundup 2/15/2016

Feb 15, 2016 8:00:42 AM By Stu Sjouwerman

The bad guys have been awfully busy these last few days. Here is your ransomware roundup with the latest "new features".

Ransomware Criminals Infect Thousands With Weird WordPress Hack

Feb 6, 2016 11:00:13 AM By Stu Sjouwerman

An unexpectedly large number of WordPress websites have been mysteriously compromised and are delivering the TeslaCrypt ransomware to unwitting end-users. Antivirus is not catching this ...

This Week's Ransomware Roundup

Jan 31, 2016 9:51:22 AM By Stu Sjouwerman

1) I was going to write up all the ransomware related news and then ran across this article by Senior Editor Sara Peters at Darkreading. Saves me some time! She started out with: ...

Alert: Stupid And Damaging New Ransomware Called 7ev3n

Jan 28, 2016 2:54:51 PM By Stu Sjouwerman

Larry Abrams had the scoop: "A new ransomware has been spotted called 7ev3n that encrypts your data and demands 13 bitcoins to decrypt your files. A 13 bitcoin [almost $5,000] ransom ...

First Javascript-only Ransomware-as-a-Service Discovered

Jan 5, 2016 9:06:32 AM By Stu Sjouwerman

Cybercrime has piggybacked on the extremely successful SaaS model and several strains of Ransomware-as-a-Service (RaaS) like TOX, Fakben and Radamant have appeared in 2015. However, a new ...

Major TeslaCrypt Ransomware Offensive Underway

Dec 16, 2015 1:17:59 PM By Stu Sjouwerman

This month, Symantec researchers reported a boost in TeslaCrypt attacks, going from 200 a day to 1,800. TeslaCrypt first appeared in March 2015, and differentiated itself because many of ...

Kaspersky Sees Ransomware Doubling Year Over Year

Dec 14, 2015 4:44:18 PM By Stu Sjouwerman

Antivirus company Kaspersky has been monitoring ransomware pretty much from the get-go. Not surprising, as they are in Moscow and the main ransomware malware developers are Russian as ...

Cryptowall 4.0 Delivered via Nuclear Exploit Kit

Nov 27, 2015 10:13:17 AM By Stu Sjouwerman

Earlier than expected - but similar to Cryptowall 3.0 - a few weeks after its release, Cryptowall 4.0 ransomware is now delivered via the Nuclear Exploit Kit, (NEK) according to the ...

Ransomware News Roundup November 2015

Nov 17, 2015 5:42:21 PM By Stu Sjouwerman

DecryptorMax 24-hour deadline Ransomware strains use different ways to pressure victims into paying, varying from 7 days after which the ransom doubles, to threatening to publish files on ...

Bitdefender Releases Cryptowall 4.0 Ransomware Vaccine

Nov 11, 2015 3:10:08 PM By Stu Sjouwerman

Right after a new, badder version 4.0 of CryptoWall came out, Romanian security company Bitdefender has released a vaccine they claim will block ransomware infections. Andra Zaharia of ...

FFIEC warns of increased ransomware attacks

Nov 9, 2015 10:35:38 AM By Stu Sjouwerman

Ransomware continues to be a source of worry and now U.S. regulatory agencies are getting in the fray. The Federal Financial Institutions Examination Council (FFIEC) published a statement ...

New Triple Threat Chimera: Ransomware, Extortion And Data Breach

Nov 7, 2015 10:33:57 AM By Stu Sjouwerman

OK, Heads Up! This has not hit U.S. shores yet, but it's just a matter of time. This nasty bit of crimeware is being beta-tested in Germany at the moment, and that is where the reports ...

CryptoWall v4.0 released: Now encrypts the file names as well

Nov 4, 2015 1:52:47 PM By Stu Sjouwerman

Lawrence Abrams from the famous bleepingcomputer site wrote at Spiceworks: "CryptoWall 4.0 has been released that displays a redesigned ransom note, new filenames, and now encrypts a ...

Staggering CryptoWall Ransomware Damage: 325 Million Dollar

Oct 30, 2015 1:52:48 PM By Stu Sjouwerman

A brand new report from Cyber Threat Alliance showed the staggering damage caused by a single criminal Eastern European cyber mafia. The CTA is an industry group with big-name members ...

FBI’s Advice on Ransomware? Just Pay The Ransom.

Oct 26, 2015 9:54:57 AM By Stu Sjouwerman

In-brief: The nation’s top law enforcement agency is warning companies that they may not be able to get their data back from cyber criminals who use Cryptolocker, Cryptowall and other ...

Ransomware Spreads Using Remote Desktop and Terminal Services Attacks

Oct 22, 2015 11:05:07 AM By Stu Sjouwerman

Larry Abrams at tech blog Bleeping Computer was the first one to report on this new wrinkle. The ransomware is called LowLevel04 and encrypts data using RSA-2048 encryption, the ransom is ...

Cisco Takes Down $60M Ransomware Operation

Oct 7, 2015 1:32:33 PM By Stu Sjouwerman

Good news for a change. Cisco just posted that they disabled a cybercrime operation that used the Angler exploit kit to distribute ransomware. The takedown shutttered a global ransomware ...

Ransomware Attacks Move From Consumers To Small Medium Business

Sep 28, 2015 2:47:39 PM By Stu Sjouwerman

The criminal gangs that live off ransomware infections are targeting Small Medium Business (SMB) instead of consumers, a new Trend Micro Analysis shows. The reason SMB is being targeted ...

Miami County pays CryptoWall Ransom To Get 911 Center Back Online

Sep 28, 2015 11:14:34 AM By Stu Sjouwerman

The Miami County Communication Center’s administrative computer network system was compromised with a CryptoWall 3.0 ransomware infection which locked down their 911 emergency center. ...

Security Awareness Training Blog

Ransomware Blog

View Topics