Posts Tagged ‘Ransomware forensics’

The File Server Resource Manager is a Windows server, 2016 and 2012 R2 Role. This role allows you to add fine-grained quotas to folders, it allows you to automate the task window files.

Attacks using encryption viruses have become a true trend in 2017. Such attacks were recorded a lot, but the loudest of them were WannaCry and NotPetya. Restoring hard disks encrypted with Petya / NotPetya is a tedious, but possible, task.

In mid-May 2017, many companies around the world were attacked by the WannaCry network crypto variant. The Wannacle malware spread across local networks and the Internet by exploiting the CVE-2017-0143 (MS17-010) vulnerability in components of the SMBv1 service (port TCP 445) in Windows operating systems. Since the industrial network is not directly connected to the Internet, and access is provided through the corporate network using NAT, a firewall and a corporate proxy server, which makes it impossible to infect such systems via the Internet. There are typical industrial network configuration errors, which have led to WannaCry infections, according to our data:

The Ransomware is the scourge of our time. No one is immune from seeing a demand to pay hackers money on the screen of his computer, laptop or mobile phone. Usually, hackers encrypt user files in case these files may be important to the user and he is ready to spend a certain amount of money for deciphering them.