Lowyat.NET: Latest topics by linuxscriptshub

Thing we should learn from WannaCry

linuxscriptshub — Wed, 24 May 2017 20:05:30 +0800

THING WE SHOULD LEARN FROM THE RANSOMWARE
What should we learn from WannaCry Ransomware?

A week ago, we have seen a new ransomware with code name WannaCry spread rapidly all over the world, infecting thousands of computers and causing crisis in a wide range of industries

WHAT IS RANSOMWARE
Ransomware is malware that encrypts all of the contents on a computer’s hard drive, locking them behind a password. Also included is a time limit: Pay up soon or the files are gone forever. Ransomware is chillingly effective because it takes advantage of structural and beneficial features of the internet. Widely available strong encryption makes it virtually impossible to brute-force a key to unlock the files — that is, to guess a password, using automation to try several times a second. Complex and interconnected systems like those that serve hospitals or utilities companies are vulnerable on several fronts, and are difficult to maintain and secure because of that very complexity and interoperability.

https://linuxscriptshub.com/thing-learn-wannacry-ransomware/

Latest Security news from Cyber Security

linuxscriptshub — Tue, 23 May 2017 21:13:14 +0800

TECH NEWS
A cyber-security expert in Croatia has discovered a new malware that gathers seven hacker software that allegedly leaked from the US National Security Agency (NSA), who warned that there would be a more shocking earlier than WannaCry attack.

Miroslav Stampar, who works in the Croatian computer emergency response team, recently discovered a new malware called EternalRocks, which utilizes seven kinds of rumours that were stolen by the NSA and were made by the hacker organisation “Shadow Brokers” (EternalBlue), (EternalRomance), (DoublePulsar), and so on.

https://linuxscriptshub.com/latest-security...cyber-security/

Study found that android -related malware

linuxscriptshub — Tue, 16 May 2017 22:27:24 +0800

Tech News

Recently hackers released WannaCry extortion software to get the city full of virus, although the virus only Windows system will be in the move, but you are not the owner of the phone to be taken lightly. As anti-virus software companies have found Android-related malware is increasing at an alarming rate, it is expected that the total number of malware will increase to 3.5 million by the end of this year, so it’s important to keep in mind before downloading and installing the app.

G DATA RESEARCHER REPORT
In view of the Android system openness and high penetration rate, so there are more malicious software is not surprising, but in recent years the situation has become more and more serious. According to anti-virus software company G Data researchers found that the first quarter of this year there have been more than 750,000 malware, and the current growth rate, is expected to go to the end of 2017 will increase to 3.5 million, more than last year More than 3.24 million more. The report also warns third-party vendors to be more likely to be infected because their system updates are often slower and slower.

Read More here
https://linuxscriptshub.com/study-found-and...sed-8400-daily/

The study found that Android malware or ransomware

linuxscriptshub — Tue, 16 May 2017 22:22:27 +0800

Tech News

Recently hackers released WannaCry extortion software to get the city full of virus, although the virus only Windows system will be in the move, but you are not the owner of the phone to be taken lightly. As anti-virus software companies have found Android-related malware is increasing at an alarming rate, it is expected that the total number of malware will increase to 3.5 million by the end of this year, so it’s important to keep in mind before downloading and installing the app.

G DATA RESEARCHER REPORT
In view of the Android system openness and high penetration rate, so there are more malicious software is not surprising, but in recent years the situation has become more and more serious. According to anti-virus software company G Data researchers found that the first quarter of this year there have been more than 750,000 malware, and the current growth rate, is expected to go to the end of 2017 will increase to 3.5 million, more than last year More than 3.24 million more. The report also warns third-party vendors to be more likely to be infected because their system updates are often slower and slower.

Read More here
https://linuxscriptshub.com/study-found-and...sed-8400-daily/

Wanna CryTrue 3.0 variant version has begun to be

linuxscriptshub — Mon, 15 May 2017 14:40:04 +0800

TECH NEWS
The original WannaCry 2.0 is a failure to try the work! True 3.0 variant version has begun to be infected, but fortunately ..

Comaeio founder Matthieu Suiche found the latest variant of WannaCry from the newly infected computer, this new variant has not been found in Kaspersky Lab yesterday, “Kill Switch version”, but has switched to the new Kill Switch address.

THE ORIGINAL ATTACK HAS BEEN STALLED
The original version of the use of iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com as Kill Switch self-destruction switch, then MalwareTech’s heart to find and the first time to register the name, temporarily stop the new theory of proliferation.

KILL SWITCH IS NOT AN ATTACKER CONSCIENCE
Here it is first to deconstruct why the virus will set the Kill Switch self-destruction switch, of course, not for the final conscience, but to escape the anti-virus software analysis. Antivirus software is intended to be a virus file, set up a virtual operating environment, this environment will block any of the virus network connection, but at the same time will create a false response to the virus that a successful connection, cited it to attack.

Wannacry’s self-destruction switch is used to detect whether it is in an antivirus software under the virtual environment, the above domain name should be no one registered, so will not get any DNS response, but if the anti-virus virtual environment, Response, so if Wannacry know the environment under the anti-virus software, will stop the action to avoid being detected to kill, and wait for other opportunities on the computer.

Read the full post here