Search This Blog

Sunday, December 15, 2013

Ransomware in the Enterprise - its happening

some resources here

http://technet.microsoft.com/en-US/security/dn535790.aspx

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

http://www.microsoft.com/security/portal/mmpc/help/mss.aspx

quote here:


Crilock encrypts your files using an AES-256 key that is unique to each file and then encrypts the file-specific AES key using a 2048-bit RSA public key. The malware authors demand payment for key recovery as part of their ransom scheme. The threat targets the most useful and potentially damaging file types on any connected drive, including network shares. 

1 comment:

  1. I've been using AVG security for a few years, and I'd recommend this solution to everybody.

    ReplyDelete