Malicious Software

SailorSam

I've just received this email from the OU regarding malicious software. May be of interest to people and a warning.



MCT Safe Computing Bulletin: Beware of CryptoLocker RansomwareInbox
x





david.clover@open.ac.uk
15:27 (18 minutes ago)




to mc-safe-comput.


This is a security bulletin from the MCT-SafeComputing-List.
A copy of the text of this email for verification - which may include
further updates is at:
http://safecomputing.open.ac.uk/bulletins/safe-computing-bulletins

Bulletin ID (also shown on web version): DCLR-9CLJK6

---

B U L L E T I N
Ransomware is making a comeback - a scam whereby malicious software
encrypts files on your computer so that personal files, such as documents,
spreadsheets and images, are encrypted. They then give you a short time
(e.g. 72 hours, or three days) to pay them EUR300 for the decryption key.
The only key is available from the scammers themselves and they ask you for
money to release your files.

Ransomware typically propagates like a conventional computer worm, entering
a system through a downloaded file or a vulnerability in a network service.
The program then runs a payload that will begin to encrypt personal files
on the hard drive.

Sophos has just released a video showing how this scam operates in plain
language which will help you avoid being caught by it. In particular see
how the fake 'PDF' file is actually an executable in disguise because the
user has not made his file extensions visible.

If you have a currently up-to-date anti-malware system on your computer it
is possible that such an infection will be caught as shown in the example
video. But if your software subscription has expired it may not be
detected.

---

W E B L I N K S
Sophos:
http://nakedsecurity.sophos.com/2013/10/18/cryptolocker-ransomware-see-how-it-works-learn-about-prevention-cleanup-and-recovery/

waddler_8

See also: http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information