תוכנת כופר של צער מאיימת להשמיד קורבנות’ נתונים אם הם פונים למשא ומתן

הלגה סמית 'ספטמבר 18, 2021עודכן לאחרונה: ספטמבר 18, 2021
54 1 דקה לקרוא

The cybercriminals behind the ransomware Grief said that if the victims hired an intermediary firm specializing in negotiating with the ransomware, their data would be destroyed.

More recently, there was evidence that the developers of Ragnar Locker threaten ל “leak” the data of the victims to the network if they contact the FBI, police or private investigators. The threat also extends to those victims who turn to data recovery specialists. Following this warning last week, Ragnar Locker operators have already released all the details of one of their victims, as the affected company has hired a negotiator.

The fact is that extortionists really do not like it when professional negotiators and law enforcement agencies are involved in the case. After all, all this can lead to a decrease in profits, as well as delays and an increase in the time during which the victim responds to the incident.

עכשיו צַעַר (aka Pay or Grief) malware operators have resorted to similar threats. The hackers posted a warning on their website, which states that all data of the victim will be deleted if she contacts intermediaries.

The hackers posted a warning

We want to play a game. If we see a professional Data Recovery Company™ negotiator, we will simply destroy [your] נתונים. Data Recovery™ companies, as we mentioned above, get paid anyway. The Data Recovery Companies™ strategy is not to pay the requested amount and not to solve the case, but to slow down [the whole process]. לכן, we have nothing to lose in this case. Just a time saver for all parties involved. What will the Data Recovery Company™ earn if the ransom amount is not set and the data is simply destroyed with zero chances of recovery? We think millions of dollars. Clients will bring them money just like that.the hackers write.
מחשב מצמרר notes that with these statements, Grief not only wants to put pressure on its victims, but also to evade US sanctions. The fact is that Grief has long been associated with the Russian-speaking hacker group Evil Corp, against which the US government has imposed sanctions. זה, by prohibiting victims from hiring specialists who negotiate the ransom, hackers hope that the victims will not learn about the risks associated with the sanctions, and still pay the required amount.

התוכנה הזדונית ששימשה לפריצת התקני רשת ביתיים ומשרדיים מקושרת על ידי מומחים לקבוצת הפריצה הרוסית DoppelPaymer ransomware is renamed to Grief.

תגים
הלגה סמית 'ספטמבר 18, 2021עודכן לאחרונה: ספטמבר 18, 2021
54 1 דקה לקרוא

הלגה סמית '

תמיד התעניינתי במדעי המחשב, במיוחד אבטחת נתונים והנושא, שנקרא בימינו "מדע נתונים", מאז שנות העשרה המוקדמות שלי. לפני שנכנסתי לצוות הסרת וירוסים כעורך ראשי, עבדתי כמומחה לאבטחת סייבר בכמה חברות, כולל אחד מקבלני אמזון. חוויה נוספת: יש לי ללמד באוניברסיטאות ארדן ורידינג.

השאר תגובה

אתר זה משתמש Akismet להפחית זבל. למד כיצד נתוני תגובתך מעובד.

כפתור חזרה למעלה