{"id":29285,"date":"2019-01-22T04:00:39","date_gmt":"2019-01-22T09:00:39","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=29285"},"modified":"2019-01-22T04:00:39","modified_gmt":"2019-01-22T09:00:39","slug":"old-ransomware-is-using-an-unpleasant-new-trick","status":"publish","type":"post","link":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/01\/22\/old-ransomware-is-using-an-unpleasant-new-trick\/","title":{"rendered":"Old ransomware is using an unpleasant new trick"},"content":{"rendered":"\n<div class=\"wp-block-image\"><figure class=\"alignleft is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/01\/ransomware-2320793__340.jpg?resize=358%2C230\" alt=\"\" class=\"wp-image-29286\" width=\"358\" height=\"230\"\/><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">An old family of <strong>ransomware<\/strong> has returned with a new campaign which uses information about children stolen from crowdfunding websites and claims that payments made in exchange for unlocking encrypted files will be donated to good causes.  <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">First spotted in early 2016,&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/this-malvertising-campaign-infected-pcs-with-ransomware-without-users-even-clicking-a-link\/\">CryptoMix<\/a>&nbsp;is a combination of CryptXXX and CryptoWall ransomware. While it&nbsp;<a href=\"https:\/\/www.techrepublic.com\/article\/the-top-10-worst-ransomware-attacks-of-2017-so-far\/\" target=\"_blank\" rel=\"noreferrer noopener\">has caused issues for users over the years<\/a>, it&#8217;s a relatively low-profile form of file-locking malware that until recently appeared to have fallen off the radar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However,&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.coveware.com\/blog\/cryptomix-ransomware-exploits-cancer-crowdfunding\" target=\"_blank\">researchers at cyber security firm Coveware<\/a>&nbsp;have uncovered a new CryptoMix campaign that looks to make up for its lack of notoriety with this unpleasant new trick.   <br><a href=\"https:\/\/www.google.com\/url?rct=j&amp;sa=t&amp;url=https:\/\/www.zdnet.com\/article\/this-old-ransomware-is-using-an-unpleasant-new-trick-to-try-and-make-you-pay-up\/&amp;ct=ga&amp;cd=CAEYAioUMTcxMjM3MTQzMjM3MzY1MDMzNjcyGmY5NWQ3ZDU3NzU5MmRlMjE6Y29tOmVuOlVT&amp;usg=AFQjCNGvpVUv6HuVt8QS-bbiB1wO83H1zQ\">\ufeffRead more: <\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>An old family of ransomware has returned with a new campaign which uses information about children stolen from crowdfunding websites and claims that payments made in exchange for unlocking encrypted files will be donated to good causes. First spotted in <span class=\"excerpt-dots\">&hellip;<\/span> <a class=\"more-link\" href=\"https:\/\/blog.cyberconservices.com\/index.php\/2019\/01\/22\/old-ransomware-is-using-an-unpleasant-new-trick\/\"><span class=\"more-msg\">Continue reading &rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[636],"tags":[637],"class_list":["post-29285","post","type-post","status-publish","format-standard","hentry","category-ransomware","tag-ransomware"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":46052,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2021\/03\/25\/dearcry-ransomware-unleashed-in-microsoft-exchange-hack\/","url_meta":{"origin":29285,"position":0},"title":"DearCry Ransomware Unleashed In Microsoft Exchange Hack","author":"Rick Backus","date":"March 25, 2021","format":false,"excerpt":"Not that this real news to anyone paying attention to tech but it is not just about the hack. The real point here is there are far to many servers out there that cannot be patched because they are too old. Unfortunately many organizations look on IT infrastructure as a\u2026","rel":"","context":"In &quot;Exchange&quot;","block_context":{"text":"Exchange","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/exchange\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2020\/06\/12\/19\/02\/artificial-intelligence-5291510__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2020\/06\/12\/19\/02\/artificial-intelligence-5291510__340.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2020\/06\/12\/19\/02\/artificial-intelligence-5291510__340.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2020\/06\/12\/19\/02\/artificial-intelligence-5291510__340.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":76717,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2023\/04\/25\/ransomware-101-exploring-its-inner-workings\/","url_meta":{"origin":29285,"position":1},"title":"Ransomware 101: Exploring Its Inner Workings","author":"Rick Backus","date":"April 25, 2023","format":false,"excerpt":"Ransomware is a type of malicious software that encrypts files and demands payment for decryption. It is a growing threat to businesses and individuals, with increasingly sophisticated attack methods. Understanding how ransomware works is crucial to protecting yourself and your data.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":44419,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2020\/11\/30\/how-ransomware-defense-is-evolving-with-ransomware-attacks\/","url_meta":{"origin":29285,"position":2},"title":"How Ransomware Defense is Evolving With Ransomware Attacks","author":"Rick Backus","date":"November 30, 2020","format":false,"excerpt":"Ransomware became deadly in 2020. Healthcare facilities were attacked at an alarming rate, including one incident\u00a0in Germany\u00a0that lead to a patient death when an attack locked critical systems and a woman needing critical care was turned away. She died after she had to be taken to another city for treatment.\u00a0\u2026","rel":"","context":"In &quot;Ransomware&quot;","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2017\/06\/19\/06\/56\/arrow-2418321__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":46060,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2021\/04\/01\/acer-reportedly-suffered-a-revil-ransomware-attack-attracting-the-highest-ransom-demand-in\/","url_meta":{"origin":29285,"position":3},"title":"Acer Reportedly Suffered a REvil Ransomware Attack Attracting the Highest Ransom Demand in &#8230;","author":"Rick Backus","date":"April 1, 2021","format":false,"excerpt":"Acer suffered a REvil\u00a0ransomware attack\u00a0that attracted the highest\u00a0ransomware demand\u00a0in history. The threat actor behind the attack shared some of the pilfered files as proof of responsibility. However, the Taiwanese electronic behemoth was reluctant to acknowledge a ransomware attack. Instead, the company cited \u201creported abnormal situations\u201d and claimed to be \u201cconstantly\u2026","rel":"","context":"In &quot;Ransomware&quot;","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":31457,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/03\/22\/avast-and-emsisoft-release-free-decrypters-for-bigbobross-ransomware\/","url_meta":{"origin":29285,"position":4},"title":"Avast and Emsisoft release free decrypters for BigBobRoss ransomware","author":"Rick Backus","date":"March 22, 2019","format":false,"excerpt":"By\u00a0Catalin Cimpanu\u00a0- Avast and Emsisoft, two cyber-security firms known for their antivirus products, released today free decrypters that can help victims of the BigBobRoss ransomware recover their files without paying the ransom demand. The two decrypters are available for download from the\u00a0Avast\u00a0and\u00a0Emsisoft\u00a0sites, respectively. The ransomware is one of the smaller\u2026","rel":"","context":"In &quot;Ransomware&quot;","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/03\/bigbobross-ransom-note.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":33252,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2020\/03\/30\/ransomware-hits-healthcare-hardest-preys-on-smbs\/","url_meta":{"origin":29285,"position":5},"title":"Ransomware hits healthcare hardest","author":"Rick Backus","date":"March 30, 2020","format":false,"excerpt":"By Samantha Ann Schwartz - Ransomware\u00a0targeted healthcare more than any other industry, accounting for 29%\u00a0of total ransomware attacks in 2019, according to cyber insurer\u00a0Beazley's 2020 Breach Briefing report. Professional services (14%) and financial institutions (11%) rounded out the top three targets.\u00a0 Ransomware increased 131% from 2018 to 2019. About six\u2026","rel":"","context":"In &quot;Ransomware&quot;","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/12\/10\/20\/56\/medical-563427__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/29285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/comments?post=29285"}],"version-history":[{"count":0,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/29285\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/media?parent=29285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/categories?post=29285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/tags?post=29285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}