The Locky Ransomware Encrypts Local Files and Unmapped Network Shares

[Robert Upndown]

For some this is old news, but for many it is a cautionary tale. There has been a definite increase in the email traffic with The Locky RansomeWare disguised as an Invoice.

http://www.bleepingcomputer.com/new...ypts-local-files-and-unmapped-network-shares/

https://nakedsecurity.sophos.com/2016/02/17/locky-ransomware-what-you-need-to-know/

Be careful out there!
Bob

 

[badbadboy]

Is this something a good virus protection, adware protection etc will stop?

Is it targeted to PC's, Macs or does it matter.

 

[sdw]

Is this something a good virus protection, adware protection etc will stop?

Is it targeted to PC's, Macs or does it matter.

It's targeted at Windows PCs Avast has a complete description in their Blog https://blog.avast.com/a-closer-look-at-the-locky-ransomware

It's designed to be ignored by AV/AM programs and survives a deliberate system crash. (shutting the power off just means you'll read their splash screen when you computer restarts)

It's simple enough to avoid. Don't open any email that you don't expect.

 

[Robert Upndown]

Is this something a good virus protection, adware protection etc will stop?

Is it targeted to PC's, Macs or does it matter.

Windows! It comes in the form of an attachment. Email says you have an overdue invoice or balance for whatever. In most cases you must open the attachment which bypasses AV and attempts to infect the local computer first.
It is silent, runs in the background. In most cases will not run if privileges adjusted accordingly. Don't be running with ADMIN rights and you should be ok.

 

[badbadboy]

Thanks. Another plus one for my Steve Jobs machines :nod:

 

[westwoody]

Don't run your computer in Admin mode, and never open an email from a sender you do not recognise.
That avoids almost all viruses.
Too many users open and read every single email and attachment.

 

[Robert Upndown]

Thanks. Another plus one for my Steve Jobs machines :nod:

You might want to climb down off that soapbox. Because of the popularity of Apple products Macs are no longer invulnerable.
https://blog.malwarebytes.org/fraud-scam/2013/07/fbi-ransomware-now-targeting-apples-mac-os-x-users/
http://www.reuters.com/article/us-apple-ransomware-idUSKCN0W80VX

 

[badbadboy]

You might want to climb down off that soapbox. Because of the popularity of Apple products Macs are no longer invulnerable.
https://blog.malwarebytes.org/fraud-scam/2013/07/fbi-ransomware-now-targeting-apples-mac-os-x-users/
http://www.reuters.com/article/us-apple-ransomware-idUSKCN0W80VX

Not on a soap box and last week was a nightmare removing malware from my MBP.

The swissfist and genios malware had gotten me. Very creatively that the malware inserted hyperlinks into my browser. If a Perb review said "hot" it was hyperlinked to some travel destination site.

I've had virus protection from Panda for a year and the malware kept coming back. Installed MacScan and now it's under control 24/7.

Reality is if hackers want in, they will find a way no matter what machine you use. The trick is to find the protection that allows you to work while not slowing down the processor to a crawl.

Also not opening attachments from strangers seems to be a no brainer. I've received plenty of those "invoice" or "bill payment" emails and the sender is blocked plus sent to the spam folder.