{"id":1,"date":"2016-06-21T21:10:11","date_gmt":"2016-06-21T21:10:11","guid":{"rendered":"http:\/\/smartlinktechnologieshosting.com\/teddy\/?p=1"},"modified":"2016-09-20T16:43:52","modified_gmt":"2016-09-20T16:43:52","slug":"hello-world","status":"publish","type":"post","link":"https:\/\/smartlinktechnologieshosting.com\/teddy\/index.php\/2016\/06\/21\/hello-world\/","title":{"rendered":"Ransomware a rising predicament in Kenya."},"content":{"rendered":"
\n

This ransomware is particularly nasty because infected users are in danger of losing their personal files forever.<\/p>\n

Spread through email attachments, this ransomware has been seen targeting companies through phishing attacks.<\/p>\n

Cryptolocker will encrypt users\u2019 files using asymetric encryption, which requires both a public and private key.<\/p>\n

The public key is used to encrypt and verify data, while private key is used for decryption, each the inverse of the other.<\/p>\n

The bad news is decryption is impossible unless a user has the private key stored on the cybercriminals\u2019 server.<\/p>\n

Currently, infected users are instructed to pay $300 USD to receive this private key.<\/p>\n

Infected users also have a time limit to send the payment. If this time elapses, the private key is destroyed, and your files may be lost forever.<\/p>\n

Files targeted are those commonly found on most PCs today; a list of file extensions for targeted files include:
\n3fr, accdb, ai, arw, bay, cdr, cer, cr2, crt, crw, dbf, dcr, der, dng, doc, docm, docx, dwg, dxf, dxg, eps, erf, indd, jpe, jpg, kdc, mdb, mdf, mef, mrw, nef, nrw, odb, odm, odp, ods, odt, orf, p12, p7b, p7c, pdd, pef, pem, pfx, ppt, pptm, pptx, psd, pst, ptx, r3d, raf, raw, rtf, rw2, rwl, srf, srw, wb2, wpd, wps, xlk, xls, xlsb, xlsm, xlsx<\/p>\n

In some cases, it may be possible to recover previous versions of the encrypted files using System Restore or other recovery software used to obtain \u201cshadow copies\u201d of files.<\/p>\n

Removal:<\/strong><\/p>\n

Malwarebytes \u00a0Anti-Malware detects Cryptolocker infections using multiple names, to include\u00a0Trojan.Ransom <\/strong>and Trojan.CriLock.XL<\/strong>, but it cannot recover your encrypted files due to the nature of asymmetric encryption, which requires a private key to decrypt files encrypted with the public key.<\/p>\n

Backups.<\/strong><\/p>\n

However, a local backup may not be enough in some instances, as Cryptolocker may even go after backups located on a network drive connected to an infected PC.<\/p>\n

Ref:\u00a0https:\/\/blog.malwarebytes.com\/101\/2013\/10\/cryptolocker-ransomware-what-you-need-to-know\/<\/p>\n<\/div>\n

\u00a0<\/p>\n

\u00a0<\/p>\n

\n
\n

\u00a0<\/p>\n