Battling ransomware... again.
koaladomingo wrote:You could try a memory scraper, but depending on the Crypto version, it never mounted the key so it won't be in RAM. Plus scrapers are pricey. It sucks the user lost their data, but...
View ArticleBattling ransomware... again.
Bud G. wrote:Take a look through the Security forums here and you'll see plenty of things to lock yourself down further to prevent this from happening. You might even talk to management about some...
View ArticleBattling ransomware... again.
LegoMan wrote:"ransomware has gotten through our security"...so no Internet filter then?...no deny any any outbound firewall rules?Filters are applied, and ports used by these buggers are monitored by...
View ArticleBattling ransomware... again.
koaladomingo wrote:Gil. Did some digging for you and anyone else who is interested. http://community.spiceworks.com/topic/396103-cryptolocker-prevention-kit-updated^ GPOs created by the community that...
View ArticleBattling ransomware... again.
Check out a whitelist software restriction policy. Has been, and to my knowledge, still is the most effective countermeasure.
View ArticleBattling ransomware... again.
gil.valencia wrote:This is the nth time ransomware has gotten through our security.Your security sucks. Change your AV. Read about the new virus here.
View ArticleBattling ransomware... again.
i have found that kind of virus in one of our user's workstation and it came from an email attachment. After attacked by ransomware all files have 4 characters random extension. And I cannot open a...
View ArticleBattling ransomware... again.
Hello Gil.valenciaI would say that user training is going to be very important. I haven't ever worked with Stu from "Knowbe4" but I have heard great things.Also to have picked this up as many times as...
View ArticleBattling ransomware... again.
PRCSsupport wrote:Hello Gil.valenciaI would say that user training is going to be very important. I haven't ever worked with Stu from "Knowbe4" but I have heard great things.Also to have picked this up...
View ArticleBattling ransomware... again.
The user's PC has been nuked and the server restored from backups. Issue resolved. Thanks to everyone for the great pieces of advice. :D
View ArticleBattling ransomware... again.
Sounds like once you've recovered from this one you really need to take your users aside and edumacate them in what they should and should not be opening when it comes to attachments. After all the...
View ArticleBattling ransomware... again.
hthompson wrote:Sounds like once you've recovered from this one you really need to take your users aside and edumacate them in what they should and should not be opening when it comes to attachments....
View ArticleBattling ransomware... again.
I was just rereading what I wrote, I noticed what would be considered a typo (I missed some important words)Comodo white lists programs and files. they are allowed to function unfettered. Any file that...
View ArticleBattling ransomware... again.
PRCSsupport wrote:I was just rereading what I wrote, I noticed what would be considered a typo (I missed some important words)Comodo white lists programs and files. they are allowed to function...
View ArticleBattling ransomware... again.
Bryan Doe wrote:Check out a whitelist software restriction policy. Has been, and to my knowledge, still is the most effective countermeasure.Can't spice this up enough. Block your users from running...
View ArticleBattling ransomware... again.
If a user name/password has been guessed, it would be easier to gain access.Have you asked everyone to change passwords?
View ArticleBattling ransomware... again.
sandymcclintock wrote:If a user name/password has been guessed, it would be easier to gain access.Have you asked everyone to change passwords?I don't think it has been, but our domain passwords are...
View Article
