OzSTOC
No Parking Zone! => Off Topic, Off Colour, and non-motorcycle related => Topic started by: JuST Peter on November 24, 2014, 04:53:24 PM
-
I received the following in an email from a very reliable source, but still did some sleuthing of my own, just to be sure
Please be advised, and advise your staff immediately, that there is a Ransomware virus going around again today.
This email looks to be a speeding fine and once the attached pdf is opened your files become encrypted. Delete the email immediately - do not open.
Logically, the police do not have your email address so cannot issue fines electronically.
Previously the virus has been spread via legitimately looking emails from Banks, Australia Post, Firearms Registry and the Tax Office.
Thank you and kind regards
Jane Penrose
(http://img.acianetmedia.com/i/3XPyH.jpg)
I've googled it and got the following:
https://www.google.com.au/?gws_rd=ssl#safe=off&q=Cryptolocker+Virus (https://www.google.com.au/?gws_rd=ssl#safe=off&q=Cryptolocker+Virus)
Wikipedia:
http://en.wikipedia.org/wiki/CryptoLocker (http://en.wikipedia.org/wiki/CryptoLocker)
and Snopes:
http://www.snopes.com/computer/virus/cryptolocker.asp (http://www.snopes.com/computer/virus/cryptolocker.asp)
-
Thanks for the heads-up Peter. :thumb
-
I have received various emails about parcels could not be delivered, so click here, as well as from banks with which I don't have accounts. Also some about unpaid tolls supposedly from the NSW RTA. So if it looks suss delete. Sounds like a variation of all those.
-
Yup .. I have had to give a couple of clients bad news now with this one. Be aware it is also network aware and will encrypt mapped drives as well (NAS box, home server, etc). If you have a larger network you can always create a group policy object stopping users being able to execute files from the temp location. This helps get rid of the clickety click problems but means you actually have to save the attachment that you want to open.
Just think before opening any attachment like this "how does this company know my email address to send me this thing? "