Tag Archives | Locky

Cluley 250 thumb

Blogger turns tables on cyber-scammer by infecting them with ransomware

BBC News reports:

A French security researcher says he managed to turn the tables on a cyber-scammer by sending him malware.

Technical support scams try to convince people to buy expensive software to fix imaginary problems.

But Ivan Kwiatkowski played along with the scheme until he was asked to send credit card details. He instead sent an attachment containing ransomware.

On one level I feel like just about everyone else reading the story. The scammers deserved everything they got, and isn't it hilarious that a "victim" turned the tables and managed to infect the criminals' computer with a copy of the Locky ransomware.

But another part of me feels uncomfortable.

I don't think the existence of online crime gives any of us a green light to break the law ourselves, tricking others into running malware and making changes to their computer systems without their permission.

Yes, waste scammers' time if you want to. But I would not recommend breaking the law.

Nonetheless, I'm sure some of you will be tickled by the story. You can read it in full on Kwiatkowsi's blog.

Cluley 250 thumb

Be careful in your inbox. Massive Locky ransomware campaign underway

F-Secure is warning computer users about a significant increase in sightings of the Locky ransomware, typically spammed out posing as invoices or profiles for positions at your company.

Here is how researcher Päivi Tynninen described the scale of the malware campaign:

Yesterday, Tuesday, we saw two new campaigns with a totally different magnitude: more than 120,000 spam hits per hour. In other words, over 200 times more than on normal days, and 4 times more than on last week’s campaigns.

If you make the mistake of opening one of the ZIP files attached to the spammed out messages, you will find a JavaScript file inside. Clicking on it would be a big mistake and lead to your computer being hit by the notorious Locky ransomware. Before you know it, you may have lost access to your files and find yourself being blackmailed for their safe return.

Stay safe folks. Always be suspicious of unsolicited attachments.