Forum Home
PC World Chat
 
Thread ID: 135784 2013-12-11 18:51:00 Ransom Malware pctek (84) PC World Chat
Post ID Timestamp Content User
1362315 2013-12-11 18:51:00 www.nzherald.co.nz

What??!!

The computers became infected after users opened a compressed "zip" file attachment which appeared to be an invoice or statement.
Netsafe's Chris Hails said said PCs running on older XP operating systems that had not been regularly updated were most vulnerable.

What absolute rubbish.
I get annoyed with this PC myth that running updates protects you from malware. IT doesn't. It never has.

What, an unpatched copy of XP somhow takes control of your brain and forces you do open and run an email attachment??

I know many people, myself included who have never run the updates and remain malware free.
On the other hand, in my business, I continually cleaned out infections from up to date patched PCs.

No wonder people have issues.
pctek (84)
1362316 2013-12-11 18:56:00 It happens because people are curious, and stupid enough to open attachments, in emails from people they dont know. How many times do people have to be told, NOT to open attachments in emails. From someone they dont know. Before, it sinks in

You're right it has nothing to do with updated computers. It doesnt matter if its up to date, or not. If you're stupid enough to open files in attachments, then run it / them. Your system will get infected
Speedy Gonzales (78)
1362317 2013-12-11 19:57:00 It happens because people are curious, and stupid enough to open attachments, in emails from people they dont know. How many times do people have to be told, NOT to open attachments in emails. From someone they dont know. Before, it sinks in

You're right it has nothing to do with updated computers. It doesnt matter if its up to date, or not. If you're stupid enough to open files in attachments, then run it / them. Your system will get infected
:+1: people are courious, and it gets them in trouble.

One person I know got a email - the ones you have to click to verify your bank account details, they told me several times they KNEW they shouldn't click it as they had been warned, but wanted to see what happened -- Lets say they found out the next day when they had $$ removed overnight from their bank account and the bank locked their account till the PC was checked for infections -- which it didn't have, it was user actions.:groan:
wainuitech (129)
1362318 2013-12-11 20:12:00 My uncle had a similar thing. Except this was when the guy was still in his PC lol. He rang me later after the guy had gone. To tell me someone from MS rang. And he went to his bank's site, and logged in.

I told him before NOT to let anyone who rings you up, into your PC. So, I logged in with teamviewer, checked things out. And quit it. Then the guy from MS rang again to continue lol. That didnt last long. Someone from MS rang him again 2 days ago. That call was short and sweet.

What these guys do, is similar to social engineering, or confidence tricksters.
Speedy Gonzales (78)
1362319 2013-12-11 20:57:00 Its about time that ISP's all over the world were told to get their act together and close the accounts of people who send this stuff

They could stop it tomorrow if they all did that.

I feel really sorry for newbies who get tricked wit this stuff.

But I get 2 or 3 emails from ANZ bank security a week.

And lately about 5 emails a day offering me a job for 3 k a month

And now its 30 k a month !

Plus all the young girls that want to show me their photos.....
Digby (677)
1362320 2013-12-11 21:09:00 Its about time that ISP's all over the world were told to get their act together and close the accounts of people who send this stuff
Will never happen, some ISPS in Russia & Asia dont care as long as they get paid


Its easy to make a mistake & open an attachment, especially the fedex/paypall/bank scam emails .
After 20 years in IT, my old Boss got caught by opening a Fedex scam email , he was expecting a Fedex delivery. People make mistakes when stressed out or just
not thinking carefully about what they do.

I have one customer who would open every spam/scam email,just to try & see why they were being sent to him. It took about a year to train/convince him not to do it.
:groan:
1101 (13337)
1362321 2013-12-11 21:21:00 Unfortunately noone has yet come up with a way to stop it, maybe the ISP's haven't tried all that hard but they can't do anything as it stands. Sure it seems like some of these guys should be easy to track down and stop and hard to understand why that doesn't happen more, but a lot of times they don't use their own accounts or E-mail to send all this spam out and you would end up punishing a hapless victim for the actions of someone else.

A few years back someone was mooting the Idea of micro charges for E-mail where it would cost you something like 1-2c to send an E-mail which wouldn't effect home users much but would stop anyone bulk E-mailing spam/scams ,trouble was they would have to deal with hacked E-mail accounts and bogus charges too often and it never happened.
dugimodo (138)
1362322 2013-12-12 00:08:00 Unfortunately noone has yet come up with a way to stop it

Mail marshal picks it up every time, my users never even see it.
Alex B (15479)
1362323 2013-12-12 01:29:00 Unfortunately noone has yet come up with a way to stop it, maybe the ISP's haven't tried all that hard but they can't do anything as it stands. Sure it seems like some of these guys should be easy to track down and stop and hard to understand why that doesn't happen more, but a lot of times they don't use their own accounts or E-mail to send all this spam out and you would end up punishing a hapless victim for the actions of someone else.

A few years back someone was mooting the Idea of micro charges for E-mail where it would cost you something like 1-2c to send an E-mail which wouldn't effect home users much but would stop anyone bulk E-mailing spam/scams ,trouble was they would have to deal with hacked E-mail accounts and bogus charges too often and it never happened.

Yea problem with that is that it's usually spam bots on an infected computer/s sending the emails so again the actual culprits wouldn't be the ones paying the bill.
CYaBro (73)
1362324 2013-12-12 01:35:00 I had two clients just this week that got infected by this virus and it went through and started encrypting all the shared files on their servers.
The strange thing is that they both run Eset and they were up to date, on their exchange server and the workstations, so it got past both of them.
NOD eventually picked it up but not before it had managed to encrypt quite a lot of files.
This also meant that they never got the ransom screen as NOD had already killed it.

Luckily both run ShadowProtect so we were able to just restore from the last good backup, which was an hour before this happened.
The infection came from a user opening an attachment from an unknown source....
CYaBro (73)
1 2