Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 
3932 posts

Uber Geek


  #1518360 23-Mar-2016 12:53
Send private message

That is part of the nasty thing early on. Detectors only found it AFTER the payload had been delivered as it was some form of polymorphic .exe with scripting that just didnt get picked up. What did was URLs and keywords in the text files they make when they have done the deed. 

 

 

 

I't wasn't attaching to files to encrypt them, it was being done externally on a TSR. So unless you specifically had the definitions like you say at 0day which is hard to, it was easily missed unless you checked memory or odd .exe and reg changes.


760 posts

Ultimate Geek

Lifetime subscriber

  #1518413 23-Mar-2016 13:08
Send private message

freitasm:

 

Drive-by malware has been around for years. ... Some are not even in the browser - the usual culprits are Java applets and Flash.

 

 

Hate to say it, but Dead Steve Jobs was right!
No Flash, none at all, not ever. Just uninstall it.

 

Some web sites won't work anymore, too bad, complain to them that they're using a well-known malware vector and you're going elsewhere.
Then go elsewhere.
How may times would you go to a restaurant that gave you norovirus?

 

 


 
 
 
 


gzt

11475 posts

Uber Geek

Lifetime subscriber

  #1518419 23-Mar-2016 13:36
Send private message

Some business applications still require it for some features.

IE has a feature similar to click to play/whitelist for partial mitigation.



192 posts

Master Geek


  #1518449 23-Mar-2016 14:14
Send private message

I've setup an early warning system until I can get on top of the issue.

 

If anyone's interested: http://alexappleton.net/post/83785313416/download-cryptolocker-tripwire-10


22723 posts

Uber Geek

Trusted
Lifetime subscriber

  #1518451 23-Mar-2016 14:18
Send private message

On a slightly unrelated topic but related to flash sort of. Every few days Shockwave crashes in Chrome. Is there any end to when we will need Shockwave installed?


BDFL - Memuneh
67534 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1518493 23-Mar-2016 15:19
Send private message

surfisup1000:

 

freitasm:

 

Drive-by malware has been around for years. Vulnerabilities have also been around for years - one is fixed another one shows up. Some are not even in the browser - the usual culprits are Java applets and Flash.

 

 

True but usually if you have the latest updates you were ok. 

 

In the past, generally the worst exploits require you to open a file (assuming one is applying OS updates). 

 

The OP seems to be saying it has recently become difficult to protect against this cryptolocker software. Just opening a webpage can infect your computer, even with latest patches installed. 

 

 

"recently become difficult to protect against this cryptolocker software. Just opening a webpage can infect your computer, even with latest patches installed."

 

Symantec and others have been warning of drive-by downloads for years now, and no, never required users to open files. Drive-by malware by definition almost always used an exploit that leverage some know vulnerability to automatically start some action - usually a zero-day vulnerability.

 

 





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 


1973 posts

Uber Geek

Trusted
Subscriber

  #1518766 24-Mar-2016 06:26
Send private message

And new tool overnight to protect against macro driven tools...

 

 

http://news.softpedia.com/news/microsoft-adds-new-feature-in-office-2016-that-can-block-macro-malware-502058.shtml

 





CPU: Intel 3770k| RAM: F3-2400C10D-16GTX G.Skill Trident X |MB:  Gigabyte Z77X-UD5H-WB | GFX: GV-N660OC-2GD gv-n660oc-2gd GeForce GTX 660 | Monitor: Qnix 27" 2560x1440

 

 


 
 
 
 


2798 posts

Uber Geek

Trusted
Lifetime subscriber

  #1518847 24-Mar-2016 10:34
Send private message

mentalinc: And new tool overnight to protect against macro driven tools... http://news.softpedia.com/news/microsoft-adds-new-feature-in-office-2016-that-can-block-macro-malware-502058.shtml

 

While we have seen some cryptoware come in via malformed Office files, it's only a small percentage (in my experience).

 

The Crypto Tripwire idea is smart.  I'll look more closely at this.





"4 wheels move the body.  2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

1 | 2 | 3 
View this topic in a long page with up to 500 replies per page Create new topic





Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Soul Machines joins forces with the World Health Organization
Posted 13-Jul-2020 18:00


Chorus completes the build and commissioning of two new core Ethernet switches
Posted 8-Jul-2020 09:48


National Institute for Health Innovation develops treatment app for gambling
Posted 6-Jul-2020 16:25


Nokia 2.3 to be available in New Zealand
Posted 6-Jul-2020 12:30


Menulog change colours as parent company merges with Dutch food delivery service
Posted 2-Jul-2020 07:53


Techweek2020 goes digital to make it easier for Kiwis to connect and learn
Posted 2-Jul-2020 07:48


Catalyst Cloud launches new Solutions Hub to support their kiwi Partners and Customers
Posted 2-Jul-2020 07:44


Microsoft to help New Zealand job seekers acquire new digital skills needed for the COVID-19 economy
Posted 2-Jul-2020 07:41


Hewlett Packard Enterprise introduces new HPE GreenLake cloud services
Posted 24-Jun-2020 08:07


New cloud data protection services from Hewlett Packard Enterprise
Posted 24-Jun-2020 07:58


Hewlett Packard Enterprise unveils HPE Ezmeral, new software portfolio and brand
Posted 24-Jun-2020 07:10


Apple reveals new developer technologies to foster the next generation of apps
Posted 23-Jun-2020 15:30


Poly introduces solutions for Microsoft Teams Rooms
Posted 23-Jun-2020 15:14


Lenovo launches new ThinkPad P Series mobile workstations
Posted 23-Jun-2020 09:17


Lenovo brings Linux certification to ThinkPad and ThinkStation Workstation portfolio
Posted 23-Jun-2020 08:56



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.