Slashdot Mirror

← Back to Stories (view on slashdot.org)

Ransomware Hits Three Indian Banks, Causes Millions In Damages (malwarebytes.org)

Posted by timothy on from the pretty-soon-talking-real-money dept.

An anonymous reader writes: Ransomware has locked computers in three major Indian banks and one pharmaceutical company. While the ransom note asks for 1 Bitcoin, so many computers have been infected that damages racked up millions of dollars. According to an antivirus company that analyzed the ransomware, it's not even that complex, and seems the work of some amateur Russians.

4 of 76 comments (clear)

  1. Not too shocking by Shoten · · Score: 5, Informative

    Most of these ransomware packages can traverse laterally within an org; they run in the rights context of the user on the first infected computer and use that to infect other systems, spreading within the local network. So if you don't have your permissions properly set up (having "Domain Users" in the local Administrators group on your desktops as a matter of standard, for example), it's a cakewalk for the malware to hit everyone.

    --

    For your security, this post has been encrypted with ROT-13, twice.
  2. That word by Barny · · Score: 5, Insightful

    "Amateur Russians."

    If they are actually making money from this, then they are firmly in the "professional" bracket.

    --
    ...
    /me sighs
    1. Re:That word by turbidostato · · Score: 5, Insightful

      "Amateur Russians."

      And that means the headline is wrong. It says "Ransomware Hits Three Indian Banks, Causes Millions In Damages" when it should say instead "Incompetence Hits Three Indian Banks, Causes Millions in Damages".

      When some amateurs from a different country can wreak havoc in three different financial institutions the cause is not whatever the amateurs have done but gross incompetence.

  3. Fake news by ajyand · · Score: 5, Insightful

    Fake news just based on word of mouth. Take a look at the original article referenced in the referenced article and you'll know that not a single aspect of the news is verifiable. No company has been named. No people have been named. Just one person's statement has been bloated into a short article.