Gandcrab: Blackmail Trojan uses gaps in Windows and Flash
After applications, manipulated websites are also gateway gates for the blackmail Trojan Gandcrab. Import updates for Windows and Flash now.
We reported about Gandcrab – a new Blackmail Trojan who, like Locky & Co. once did e-mail attachments in applications. Now the security company FireEye reports about manipulated web pages, which are a new Exploit Kit (Fallout EK). This exploits security vulnerabilities in Windows and Flash Player to infiltrate the Gandcrab Trojan and other malware.
The first cases FireEye said they only showed up in Asia. local Users should nevertheless take precautions and check their system status. The gaps used for the Microsoft operating system and the Adobe player have already been available for some time updates.
For Windows you must have the August patchday updates installed. There are some gaps in the Flash Player closed since April 2018. Follow the instructions and downloads in the linked articles to get the corresponding patches. Alternatively, call the update routines for Windows and Flash Player and search for new downloads.
Gandcrab is a blackmail Trojan (Ransomware), the file of an infected computer is encrypted. Once infected, the system offers only limited access to the surface. To restore access, according to desktop ads, the victim is supposed to pay $500 in Bitcoin. The Ransomware mesh has been diving regularly for almost two years on. In some cases, security experts can use the cancel encryption and offer decryption tools.
Extortion Trojan: Better to take precautions …
For that there are but no guarantee. The affected person is advised to not to receive ransom demands and infected computers immediately to take the whole thing off the grid. In some cases, as with Gandcrab, it is possible that the pest may reload other malware which additionally harms you.
Again against Ransomware helps best, Provide for: Back up and archive your data independent of the system in use, so that sudden locks can be prevented by Trojans can do practically no damage – except for the Time spent restoring your own data.
