Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
'Shock & Awe' Ransomware Attacks Multiply
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/17/2017 | 6:36:34 PM
Reinfection
> Reinfection is also becoming a trend, where attackers who have successfully forced a victim to pay up to get their data back later target the same victim multiple times. "Traditional blackmailers know if someone pays once, they are probably going to pay again," he says. 

This is precisely why game theory dictates never paying blackmail.  The blackmailer always retains the leverage -- unless you take that leverage away from the blackmailer by disavowing its proprietariness and minimizing it.

In this case, if you have secure backups of your data, the loss is minimal.  But even if you get caught with your metaphorical pants down, the option of simply accepting the disappearance of your data should at least be considered. 

Moreover, if you pay the ransom and then STILL don't backup your key data, well... Charles Darwin would probably have something to say about that.
Crypt0L0cker
50%
50%
Crypt0L0cker,
User Rank: Strategist
2/16/2017 | 11:28:57 AM
Re: Spora Ransomware
New ransomware samples become more and more sophisticated. Take a look at Spora - highly professional software, probably with big budget and very skilled developers.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-19915
PUBLISHED: 2021-09-20
Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the [mailbox username in index.php.
CVE-2021-32838
PUBLISHED: 2021-09-20
Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS (Regular Expression Denial of Service) in email_regex. This is fixed in version 0.5.1.
CVE-2021-29856
PUBLISHED: 2021-09-20
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685.
CVE-2021-32839
PUBLISHED: 2021-09-20
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. Only ...
CVE-2021-38899
PUBLISHED: 2021-09-20
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575.