Until now, the threat of ransomware consisted of encrypting the files of the infected computer to demand a ransom to release them or not filter them. A recent study by the Stairwell research team found that they now target data destruction to force payment.

The research team used the Exmatter detection tool for these threats, discovering progress towards a new form of ransomware, much more lethal for the owners of the attacked computers.

The threat of destroying the data in the encrypted files constitutes the highest level of cyberattack so far, so the alarms are already sounding in the digital environment.

Given the increasingly rapid and successful actions of cyberattack specialists to stop the actions of network pirates, the request for a ransom to decrypt files has lost strength.

Its reaction has been to advance a step in the level of possible damage, focusing on the possibility of completely destroying the files and thus ensuring the payment of a ransom.

Among Kaspersky’s recommendations to avoid falling into the trap of cybercriminals, it is mentioned to avoid entering unknown pages, verify that the address is expressed as “https”, avoid the temptations of advertising that is displayed unexpectedly, as well as update periodically antivirus programs and not providing personal data when called by untrusted sources.

M.Pino

Click the link to subscribe for free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: ultimahora.es

La entrada Ransomware moves towards destruction of encrypted data apareció primero en Bitfinance.

ESET’s threat analysis specialist, Lukas Stefanko, has indicated that cybercriminals managed to place a malicious application on Google Play called the same as the Netflix series and with the same image. Although it has already been withdrawn unfortunately users could still download it through unofficial channels.

To commit the scam they impersonated the name of a company that specializes in creating wallpapers for mobile series and movies, which makes many users fall into the trap and download it believing that it is a verified app.

In addition, the fact that there are files with the icon of the famous game doll once it has been installed on the device, has convinced many users that it was a verified application.

Variant of the “Joker” malware

Stefanko classified this malware as “Joker”, which is one of the most common and dangerous banking Trojans out there. It’s a malicious software recorded and registered since 2017.

This is responsible for modifying the telephone billing services to make charges, authorize monetary operations and subscribe to payment services without the consent or knowledge of the victim.

Since “Joker” is known, Google eliminated nearly 1,700 applications with these characteristics from its download application Play Store, according to the cybersecurity company ESET in a statement.

Source: elsumario

La entrada Cybercriminals take advantage of the success of “The Squid Game” to create malware apareció primero en Bitfinance.