Cybersecurity is a major concern in today’s world, both at the corporate and personal levels. Our computers, our handheld devices, and our smart home and IoT products are vulnerable to a variety of attacks. In 2017 alone, Avast blocked 35 billion security attacks against PCs and 208 million against Android mobile devices. What was one of the biggest security threats? Ransomware.
Cyberattacks are continuing to increase in number and severity every year, and 2018 will be no exception. We believe that many of the threats we observed in 2017 will, unfortunately, appear in evolved forms this year to continue threatening our busines…
In 2017, Avast blocked more than 122 million WannaCry attacks, the infamous ransomware that caused tears to be shed around the globe. That attack, along with the Petna and Bad Rabbit ransomware attacks, cost consumers and businesses around the world more than 5 billion dollars. Without a doubt, ransomware was the year’s biggest threat. And this terrible trend will unfortunately continue rising in 2018.
Ransomware has been a hot topic recently. The latest PC ransomware, Locky, made its rounds in late February and multiple hospitals were infected with ransomware, which forced an online shutdown. Not only is ransomware continually attacking PCs, but thi…
Locky is a considerable security threat that is now widely spread.
Today, we bring you a deep look into the latest ransomware called Locky. This new file encryptor, targeting PC users, has most likely been created by authors of the well-known Dridex botnet and is spread the same way.
Locky uses all “top class” features, such as a domain generation algorithm, custom encrypted communication, TOR/BitCoin payment, strong RSA-2048+AES-128 file encryption and can encrypt over 160 different file types, including virtual disks, source codes and databases.
We monitored the Locky family this past month and discovered a second variant of the malware, which has new features and program code improvements. Locky’s authors added a new hard-coded seed to the domain generation algorithm, which allows them to deactivate Locky on Russian PCs.
Locky is spreading via spam email campaigns that are similar to those used by the Dridex botnet. They use similar file names, obfuscation, email content and structure of download URLs.
We have observed three different campaign versions of Locky and have described them below.
Below is an example of one of the spam emails. The emails are designed to make people believe they were sent from large companies such as Nordstrom, Symantec and Crown Holdings.
The recent ransomware attack on the Hollywood Presbyterian Medical Center in Los Angeles has spooked the healthcare community. Hackers installed *ransomware in the hospital computer system and held patient records hostage while demanding payment. The hospital eventually paid $17,000 to have their files unlocked. Attacks on major insurance and healthcare systems last year including Excellus […]
The security stakes only seem to be rising when it comes to the threats that affect us as modern-day consumers. Over the past year, we have seen a list of notable mobile threats that put people’s privacy at risk. Previously unseen vulnerabilities surfaced, such as Certifi-gate and Stagefright, both of which can be exploited […]
Tech support scammers may have bolstered their arsenal by using the Nuclear exploit kit to drop ransomware onto victims’ computers.
A look at some of the possible ways your new smart TV could be the subject of cyberattacks.Read More