In the latest in Ransomware, Trend Micro has a very interesting blog post about no more ransome and their 4 year anniversary. Think about this short paragraph. It says:
Celebrating its fourth anniversary this week, the initiative has helped over four million victims fight the scourge of ransomware, saving hundreds of millions
of dollars in the process. At Trend Micro, we’re proud to have played a major part, helping to decrypt over 77 million files for victims.
Think about this! 77 million files. I’ve never been to No More Ransome as of yet, but I think this is a great place to go. Maybe besides various files to decrypt things, we can learn quite a lot. I’m going to have to take a look at this.
Speaking of Ransomware, they also have an article which is heavily imaged for the sighted that might be of interest. Ensiko: A Webshell With Ransomware Capabilities is the article and it is pretty bad if you run in to anyone who may be infected with this.
There are various headings within this article. They include:
- Technical Details
- Webshell features
- Ransomware Analysis
- Tool set
- Steganologer
- Backdoor Scan
- Remote server scan
- Mass Overwrite
- Mass Overwrite
There is also a heading for conclusion.
One of the things that caught my attention was a table of features. While I try to keep this blog clean of language, I think this is worth mentioning.
Safe Mode Fucker: Disable PHP Safe Mode
is one thing that could really harm a web site. Our very own control panel along with others across the internet run the control pannel by cpanel. They are the leading control panel software with its own host manager interface for administrators.
This particular malware or ransomware can take quite a number of people out, and this article by Trend Micro called Ensiko: A Webshell With Ransomware Capabilities should be studied. This is not going to look good and I saw this article today.