Slashdot Mirror

← Back to Stories (view on slashdot.org)

RansomWare Disassembly Reveals Evolutionary Path

Posted by CowboyNeal on from the trojan-family-trees dept.

flaws writes "The guys at Secure Science Corporation have written a revealing article demonstrating the relationship with the most recent Ransom-based Trojan (known as Glamour) and some previous data stealing trojans. They include an open source decrypting utility for unlocking your files if infected, and some stats that are a bit disturbing. According to their report, in the past 8 months, 152,000 victims have been infected, and over 14.5 million records were discovered to be logged by the trojan."

8 of 64 comments (clear)

  1. My poor pornography :( by Token_Internet_Girl · · Score: 5, Funny

    "Dear User: We are currently holding your pornography hostage. Unless you send us $300, you will never see Jenna Jameson and that beer can again."

    --
    Sure baby, I'll give you my phone number...in Hex
    1. Re:My poor pornography :( by Drew+McKinney · · Score: 2, Funny

      It was a beer bottle.

      I never did get that picture back...

    2. Re:My poor pornography :( by Token_Internet_Girl · · Score: 3, Funny

      That makes more sense, I'd think a beer can would cave under the pressure... Oh wait there is no pressure in a gaping cavern... Damn!

      --
      Sure baby, I'll give you my phone number...in Hex
  2. Re:Noddleware. by dwarfsoft · · Score: 2, Funny

    The first trojan was created 6000 years ago and left the garden some years after that. The garden was invaded by Greeks in a wooden horse, or something...

    --
    Cheers, Chris
  3. In a related story by Anonymous Coward · · Score: 5, Funny

    . . .Trojan brand shown to BLOCK Evolutionary Path!

  4. Re:speaking of trojans by Farmer+Tim · · Score: 2, Funny

    I just bought 72 condoms.

    I just bought 144 condoms, and now I'm grossly oversexed.

    --
    Blank until /. makes another boneheaded UI decision.
  5. You can prevent encryption by creating a reg key by jpetts · · Score: 5, Funny

    The entry should be a REG_DWORD named WinCode in the HKLM\SOFTWARE\Microsft\Windows NT\CurrentVersion location, and should have the value 31337

    --
    Call me old fashioned, but I like a dump to be as memorable as it is devastating - Bender
  6. This post is RSA-13 encrypted by MillionthMonkey · · Score: 2, Funny

    Vs lbh jnag gb ernq vg V fryy n qrpelcgbe sbe $300 abj fraq zr zl zbarl!