Slashdot Mirror
Ransomware Hack Targeting 2 Million an Hour (axios.com)
New submitter Zorro writes: A ransomware attack sweeping the globe right now is launching about 8,000 different versions of the virus script at Barracuda's customers, Eugene Weiss, lead platform architect at Barracuda, told Axios, and it's hitting at a steady rate of about 2 million attacks per hour. What to watch out for: An incoming email spoofing the destination host, with a subject about "Herbalife" or a "copier" file delivery. Two of the latest variants Barracuda has detected include a paragraph about legalese to make it seem official, or a line about how a "payment is attached," which tricks you to click since, as Weiss puts it, "everyone wants a payment."
If not, I'm out of luck. Clicking will have no effect. :(
This article is bullshit and is written by a person with zero technical skills. Ransomware is not targeting 2 million users per hour. A spam botnet is sending 2 million emails per hour (which I don't believe either, average is 20K-100K per spam botnet). The emails carry file attachments that deploy ransomware. About 10% of spam emails are opened, and about 1% actually yield infections. ... I could go on breaking down every stupidity contained in that article.... but I actually have better things to do. This comment right here is more informative compared with the linked article.... which, btw, is based on reporting from a company that provides backup solutions. If this came from Bitdefender or Kaspersky, this would actually be credible.
He is a miracle-level IT deity, after all. With a single Python script, he'll fix the malware problem, and since he works faster than 20 regular IT deities he'll also clean up any storage closets he finds. And don't ever wear a hardhat around him; he'll escort you right off the property!
Thanks so much for another content-free bit of scaremongering.
If you had something substantial to say you wouldn't have needed to resort to empty scare-words. But what can you expect from "experts" whose best advice is "DO NOT CLICK ON THE EMAIL!" What's this, hollywood or something? Why don't you just say "security override" and all your problems go away then? Oh that's right, that's not how security works. But you like to pretend, don't you.
This particular flavor doesnâ(TM)t, but Linux is not lacking in malware, root kits and ransom ware.
The hackers are using social engineering to get people to click. That's increasingly becoming a trend, per Weiss. It's "less pure technical hacks" and instead using psychological tactics "get someone to click on something they shouldn't be."
And Herbalife in the subject line. Targeting folks who think multi-level marketing is a good thing. And doing a search on multi-level marketing companies means this hack is going to be around a long time.
I guess the Nigerian price thing has run its course?
ubuntwho? looks like a self defense 'feature'?... i like it.. part of our (r)evolution.. script along... https://www.youtube.com/watch?v=rvNkp5IUQdg
... just Barracuda wrote a blog about it.
This type of vector (payment included or here's your fax or you have a voicemail) are pretty common. I've noticed a significant increase lately, zipped with 7zip, which might be this payload. (I don't have any interest in finding out.) Part of me wants to ask, does anyone actually fall for these? But of course, that's a stupid question.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
Who, in this day and age, opens unsolicited attachments??
Even my most tech-averse friends don't do that. The thing I have to remind them about nowadays is that they also shouldn't open attachments from people they know unless they've confirmed those people intended to send them.
As long as it's only for Barracuda customers, then it's a good thing!
Would be nice to get rid of those blackmailing, lying bastards.
Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
From TFA, "It's likely not a nation-state perpetrating the hack, since the hackers' motives are financial. Instead it's a small, sophisticated group of criminals."
Really? Lazarus, believed to be linked to North Korea, is said to be responsible for numerous hacks against banks for the last couple of years including that 81 million dollar theft from Bangladesh central bank. Sure, it was Kaspersky who established that link, so consider the source. Even if they aren't nation-state supported though, there is every reason in the world to believe that NK has financial motives right now, especially on the heels of very tough economic sanctions. It seems a bit ridiculous for anyone to so quickly rule out a nation-state supported hack.
Any idea as to the Operating System that is required in order for this customer attacking ransomware virus script to execute.
https://blog.barracuda.com/2017/08/31/active-ransomware-attack-uses-impersonation-and-embedded-advanced-threats/
Funny how 30secs of research beats out a 5-min diatribe where the person spouts out things as if they know what they are talking about.
Just users infecting themselves by running malware. As a US based IT Sys. Admin, I would personally like to request that virus authors create a virus to infect VOIP systems to put all of the outsourced Help Desks in India out of business.