Home » petya

Digital Extortion: A Forward-looking View

Posted on:January 30, 2018 at 5:02 am
Posted in:Malware, Ransomware
Author:
David Sancho (Senior Threat Researcher)

In 2017, we saw digital extortion increasingly become cybercriminals’ first and foremost money-making modus operandi. It’s mostly due to ransomware — cybercriminals’ currently most popular weapon of choice, helping them in extorting cash from users all over the world and in hitting big businesses and organizations.

By infecting business-critical systems through their shotgun-style ransomware attacks and thus crippling enterprise day-to-day operations, cybercriminals managed to force big companies to bend to their will. Digital extortion has become the most successful moneymaking venture for cybercriminals, and the most effective in terms of the scale of their victims. Big or small, everyone gets hit, and everyone has to pay.

Posted on:June 27, 2017 at 12:37 pm
Posted in:Malware, Ransomware
Author:
Trend Micro

A large-scale ransomware attack reported to be caused by a variant of the Petya ransomware is currently hitting various users, particularly in Europe. This variant, which Trend Micro already detects as RANSOM_PETYA.SMA, is known to use both the EternalBlue exploit and the PsExec tool as infection vectors.

Posted on:December 29, 2016 at 11:20 pm
Posted in:Malware, Ransomware, Spam
Author:
Trend Micro

In early December, GoldenEye ransomware (detected by Trend Micro as RANSOM_GOLDENEYE.A) was observed targeting German-speaking users—particularly those belonging to the human resource department. GoldenEye, a relabeled version of the Petya (RANSOM_PETYA) and Mischa (RANSOM_MISCHA) ransomware combo, not only kept to the James Bond theme of its earlier iteration, but also its attack vector.

Given ransomware’s likely outlook to reach a plateau, persistence in the threat landscape and diversification of target victims are the names of the game. GoldenEye exemplifies bad guys trying to gain scale, leverage, and profit with rehashed malware.

Posted on:June 27, 2016 at 7:42 am
Posted in:Bad Sites, Malware, Ransomware, Spam
Author:
Trend Micro

Apart from understanding the ransomware tactics and techniques beyond encryption, it is equally important to understand how they arrive in the environment. Our recent analysis reveals that majority of ransomware families can be stopped at the exposure layer—web and email. In fact, Trend Micro has blocked more than 66 million ransomware-related spam, malicious URLs, and threats from January to May 2016.

Posted on:June 16, 2016 at 5:00 am
Posted in:Malware, Ransomware
Author:
Trend Micro

How do companies regardless of size and industry prepare for ransomware attacks? A recent study revealed that businesses are considering saving up Bitcoins, just in case they get hit by these threats and can recover their confidential files in a short span of time. While we don’t recommend succumbing to the ransom payment as it doesn’t guarantee that you’ll get your files back plus you’ll be prone to more ransomware attacks, we can’t also blame these large organizations and businesses for doing so.

Page 1 of 212

Digital Extortion: A Forward-looking View

Large-Scale Petya Ransomware Attack In Progress, Hits Europe Hard

Recent Spam Runs in Germany Show How Threats Intend to Stay in the Game

Why Ransomware Works: Arrival Tactics

Why Ransomware Works: Tactics and Routines Beyond Encryption

Security Predictions for 2018

Business Process Compromise

Stay Updated

Digital Extortion: A Forward-looking View

Large-Scale Petya Ransomware Attack In Progress, Hits Europe Hard

Recent Spam Runs in Germany Show How Threats Intend to Stay in the Game

Why Ransomware Works: Arrival Tactics

Why Ransomware Works: Tactics and Routines Beyond Encryption

Security Predictions for 2018

Business Process Compromise

Popular Posts

Stay Updated