Skip to main content

Fileless Ransomware - All you need to know.


Fileless Ransomware - All you need to know.





Many global companies, banks, and even some government organizations are struggling to protect everything from the newest type of threat that scared the world — Fileless Ransomware.
The new version of ransomware has arrived — it’s stealthy, almost impossible to detect and is forcing every vulnerable organization to pay the ransom to cyber criminals. These attacks are called “fileless” or non-malware ransomware attacks in which the attack executes malicious commands with Microsoft’s PowerShell.
It’s really important to mention that Non-malware or file-less ransomware (unlike some traditional ransomware) does not use any of the files to encrypt your data, but instead it writes scripts/macros which originate from PowerShell to encrypt the files.
Fileless malware is a unique type of software and it's really difficult to detect because the malicious code is embedded into the native scripting language or written straight into the computer's RAM, where it hides in isolated spots within the computer's memory. It's not written on disk nor does the malicious code rely on the hard drive to run these commands.

What are the biggest problems with this attack?

1. Any kind of antivirus software is useless.
2. This ransomware strain allows cyber criminals to have access to your systems. This means that they can infiltrate your computers, steal your information and encrypt your files without your IT staff even knowing.
3. It can lead to more attacks. As the cyber criminals are writing scripts they’re also gathering as much data from the victim’s computer as possible.

Prevention techniques:

Even if we can’t protect our systems to be 100% secure, there are certain measures you can take to significantly reduce the risk:
  1. Make regular Back-ups of your important data to another disk that will not be connected to the internet.
  2. Disable auto-start of every macro and avoid suspicious files.
  3. Be smart and filter your e-mails and block them if they look suspicious to you.
  4. Never visit a website that looks suspicious and never download any add-ons, plugins which are usually fake.
  5. Configure your windows accounts to be limited as possible and don’t give them administrator rights.
  6. Use good software or hardware firewall and monitor your traffic from time to time.
  7. Restrict user write permissions.
  8. Limit the privileges for PsExec.exe
  9. Install a process manager and monitor your processes from time to time.
  10. Train your staff to be informed about the possible attacks.
Labels:

Comments

Post a Comment

Popular posts from this blog

7 Signs You Have Malware and How to Get Rid of It

7 Signs You Have Malware and How to Get Rid of It PC acting strange? These warning signs could mean that your PC's security has been compromised. Here's what to do. Computers are complicated devices. They don't always do precisely what you expect. Sometimes an unexpected behavior is just a glitch; other times, it's an outward and visible sign of an inward and terrible malware infestation. If you notice any of these seven warning signs, it could mean that malware has compromised your system's security. The fact that you've got malware protection installed doesn't mean you can ignore these warning signs. Software isn't perfect, and sometimes a brand-new malware attack can slip past your security. 1. Popup Ads Start Popping Up Everywhere While not as common as they used to be, adware programs bombard their victims with advertisements. Sometimes they're ads for legitimate products, netting an affiliate fee for the adware perpetrator. Oth...
Post a Comment
Read more

What is Cyber Security?

  Cyber Security Cyber Security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. In a computing context, security includes both cyber security and physical security. Ensuring cyber security requires coordinated efforts throughout an information system. Elements of cyber security include: Application security Information security Network security Disaster recovery / business continuity planning Operational security End-user education One of the most problematic elements of cyber security is the quickly and constantly evolving nature of security risks. The traditional approach has been to focus most resources on the most crucial system components and protect against the biggest known threats, which necessitated leaving some less important system components undefended and some less dangerous risks not protected against. Such an approach is insuf...
Post a Comment
Read more