Ransomware

Rate of Ransomware Attacks Reaches Epidemic Levels

September 29, 2017 by Mike Vizard

They say misery loves company so when it comes to ransomware a new study suggests there’s a lot cold comfort to go around. Thanks to bots another other automation tools the rate at which those attacks will be launched is expected to increase. In fact, Europol, the law enforcement arm of The European Union, in an Internet Organized Crime Threat Assessment 2017 report released this week declared ransomware to be a global epidemic that is being orchestrated by organized criminal syndicates.

A separate ransomware report released this week by Crowd Research Partners finds that the rate at which ransomware attacks provides some additional insight to rate at which ransomware attacks are increasing. The survey of 516 cybersecurity professionals participating in a LinkedIn group managed by Cybersecurity Insiders finds that 75 percent of organizations affected by ransomware have experienced up to five attacks in the last 12 months and that 25 percent experienced six or more attacks.

Mike Vizard

Mike Vizard has covered IT for more than 25 years, and has edited or contributed to a number of tech publications including InfoWorld, eWeek, CRN, Baseline, ComputerWorld, TMCNet and Digital Review. He currently blogs for IT Business Edge and contributes to CIOinsight, The Channel Insider, Programmableweb and Slashdot. Mike also blogs about emerging cloud technology for SmarterMSP.

Connect with Mike on LinkedIn, Twitter, and Google+.

https://www.linkedin.com/in/michaelvizard

Is spear phishing the new ransomware?

September 29, 2017 by Christine Barry

In a 2016 survey on ransomware, 43% of North American consumers said they did not know what ransomware is. That's despite the fact that ransomware activity had increased 300% during the same time period. Toward the end of 2016, ransomware attacks against businesses were taking place every 40 seconds. For individuals, that number increases to once every ten seconds.

The number of people unaware of ransomware attacks is surely smaller now. With global attacks and prime-time ransomware-centered TV shows, ransomware is creeping its way into the minds of computer users and savvy consumers everywhere. Businesses are creating ransom and cyberattack budgets, stockpiling bitcoin, and detailing procedures and thresholds on when to pay.

It looks like spear phishing is taking the same convoluted path through the consciousness of the public. In a recent survey of IT decision makers, only 25% felt confident that users would identify a phishing attempt, though in another survey, 54% of respondents were able to identify phishing emails. Meanwhile, the number of spear phishing attacks continue to increase, and the criminals are getting better at research and impersonation.

So is spear phishing the new ransomware? Let's take a look at a few similarities:

Christine Barry

Christine Barry is Senior Chief Blogger and Social Media Manager at Barracuda. In this role, she helps bring Barracuda stories to life and facilitate communication between the public and Barracuda internal teams. Prior to joining Barracuda, Christine was a field engineer and project manager for K12 and SMB clients for over 15 years. She holds several technology credentials, a Bachelor of Arts, and a Master of Business Administration. She is a graduate of the University of Michigan.

Connect with Christine on LinkedIn and follow her on Twitter here.

https://blog.barracuda.com

Threat Spotlight: Email Malware Impersonates Secure Bank Messages

September 28, 2017 by Fleming Shi

Everyone seems to be on a heightened alert following the recent Equifax data breach and probably keeping a closer eye on bank statements and credit reports for good measure. You might even be more likely to open an email from your bank these days that perhaps you would’ve ignored in previous months. Monitoring bank accounts and credit reports is always a good idea; however, we’ve seen a recent run of alarming email threat patterns that should make you think twice before you act on an email from your bank.

In this month’s Threat Spotlight, we dissect an email attack that is impersonating a “secure message” from financial institutions, which we’re quickly finding to be a growing trend. Here’s what we’ve found:

Highlighted Threat:

Secure Bank Message Impersonation — email attack delivered by spoofed messages from financial institutions

Fleming Shi

Fleming Shi is the senior vice president of technology at Barracuda, where he leads the company’s cloud-enabled microservices technology innovation and integrations across the entire security and data protection portfolio. Connect with him on LinkedIn.

http://www.barracuda.com

Ransomware Attacks Have Entered the Realm of the Insidious and Vile

September 22, 2017 by Mike Vizard

Ransomware attacks have taken an especially nasty turn in the last week. An individual or group of people going by the pseudonym Dark Overlord has been terrorizing a high school in Montana after launching a ransomware attack. In addition to demanding the usual amount of digital cybercurrency, the attackers have been evoking the images of multiple massacres involving school-aged children to induce local authorities to comply with their demands. The hackers know precisely what it is in this day and age that parents fear most when they send their children off to school every day.

Dark Overlord is the same nom de guerre employed by the individual or group of people that also launched the recent ransomware attacks against HBO and Netflix this year demanding to be paid to not post stolen intellectual property on the Web before the media companies' scheduled broadcast. Even after receiving a reported $50,000 payment the hackers apparently went ahead in one instance and released an episode of Orange is the New Black before its official release.

[Read more…]

Mike Vizard

Connect with Mike on LinkedIn, Twitter, and Google+.

https://www.linkedin.com/in/michaelvizard

Ransomware and K-12 – Threats and Solutions: Backup is Key

September 21, 2017 by Darius Goodall

*Note: This is the third and final post in our multi-part blog series that addresses ransomware threats and solutions in K-12 environments.

Last month, I discussed the two most pivotal steps in preventing ransomware attacks from wreaking havoc on your organization: user education and securing your network. While these steps establish a robust security posture to combat cyberattacks, there is still one more layer your organization can add to ensure recovery when an attack does strike: having a solid backup plan. Let’s chat about a few recent K-12 school districts that had to leverage their backup plan. In the news, we heard about Montana’s Bigfork Public School District who in November 2016 was hit with Ransomware and a payment of $10,000 was demanded. Rather than pay, they restored with an offsite backup. The same is true for Rhinebeck Central School District in New York who was also hit by a ransomware attack and did a restored with off-site backup files as well. As you can see, having a solid backup plan in place can not only prevent a ransomware payment and spare your data but it can also provide peace of mind.

The United States Computer Emergency Readiness Team provides some guidelines to help organizations optimize their backup solutions in combatting ransomware:

Darius Goodall

Darius is a veteran of the network industry, with more than 21 years of experience in networking products, enterprise marketing and business development. He is currently Director of Product Marketing for Security at Barracuda Networks.

Connect with Darius on LinkedIn here.

http://www.barracuda.com

Barracuda Advanced Technology Group monitoring aggressive ransomware threat

September 19, 2017 by Eugene Weiss

Barracuda customers are
fully protected from this attack.

Leave us a comment below
or ping us on Twitter @barracuda
if you have any questions.

This blog continues to be updated as more data becomes available.

Jump to section:

Main
Update 9/19/17
Update 9/21/17
Update 9/22/2017
Indicators of Compromise

The Barracuda Advanced Technology Group is actively monitoring an aggressive ransomware threat that appears to come in the largest volume from Vietnam. Other significant sources of this attack include India, Columbia, and Turkey and Greece. Other countries appear to be distributing the same attack in very low volumes. So far we have seen roughly 20 million of these attacks in the last 24 hours, and that number is growing rapidly.

These attacks are wrapped in either a ‘Herbalife' branded email or a generic email that impersonates a ‘copier' file delivery:

These attacks have been morphing throughout the day, but they all use fake source email addresses. The earliest examples came from Vietnam and Greece.

Eugene Weiss

http://www.barracuda.com

Legal Eagles Start to Feel the Cybersecurity Heat

September 8, 2017 by Mike Vizard

Far too many cybersecurity professionals are in the unenviable position of often being the one person in the company continually forecasting imminent doom. But it turns out that another important constituency is also starting to share those concerns.

A new survey of 200 general counsels and in-house lawyers conducted by ALM Intelligence on behalf of the law firm Morrison & Foerster finds that 65 percent of the respondents now recognize privacy and security as being a major challenge. However, over a third (36%) said their companies have no crisis management plan in place and only three percent said their companies were “well prepared” to handle a crisis.

Mike Vizard

Connect with Mike on LinkedIn, Twitter, and Google+.

https://www.linkedin.com/in/michaelvizard

Active ransomware attack uses impersonation and embedded advanced threats

August 31, 2017 by Eugene Weiss

In the last 24 hours, the Barracuda advanced security team has observed about 20 million attempts at a ransomware attack through an email attachment “Payment_201708-6165.7z.” Here is a screenshot of the email with the addresses redacted:

In this attack, the source of the email is a spoofed address, and the attachment name and number is included in the subject line and body of the message. The full subject line in this example is “Emailing: Payment_201708-6165” and the number in the attachment name is variable.

Eugene Weiss

http://www.barracuda.com

What Can We Learn from a Summer of Ransomware?

August 29, 2017 by Phil Muncaster

Ransomware has been around now for almost a decade. But incidents in May and June took the threat to a whole new level as the worm-like WannaCry and NotPetya left a global trail of chaos and destruction behind them. Organisations big and small were hit; many are still recovering and the final financial fallout could be massive.

As any good IT security manager will tell you, it’s important to view such incidents constructively, so that if lightning does strike twice you’ll be properly protected the second time around. So what lessons can we learn from a summer of ransomware?

Phil Muncaster

Phil Muncaster is a technology writer and editor with over 12 years’ experience working on some of the biggest technology titles around, including Computing, The Register, V3 and MIT Technology Review. He spent over two years in Hong Kong immersed in the Asian tech scene and is now back in London where information security has become a major focus for his work.

Follow Phil on Twitter and connect with him on LinkedIn.

http://www.barracuda.com

Podcast: Ransomware – The Best Defense with Darius Goodall and ISMG

August 10, 2017 by Christine Barry

Recently our very own Darius Goodall sat down with Information Security Media Group (ISMG) to discuss the true impact of ransomware attacks and how to respond. It’s a great, lively discussion on this growing threat and includes best practices that any organization should be implementing today.

Darius is our Director of Product Marketing for Security, and he's a regular contributor to our blog. You can read his articles here and connect with him on LinkedIn here.

ISMG is a media organization that focuses entirely on information security and risk management. They have several brands in their network. Darius was featured on Data Breach Today, in the ransomware resource center. You can listen to the podcast from the ISMG site here.

Ransomware is on its way to becoming a $1 billion industry, by some estimates, and possibly 50 percent of enterprises have dealt with it so far. Click here for our podcast on the true impact of #ransomware and how to respond. Click To Tweet

Here’s an excerpt from the ISMG site:

Christine Barry

Connect with Christine on LinkedIn and follow her on Twitter here.

https://blog.barracuda.com