Live data from Hacker News

Another Ransomware Outbreak Is Going Global

forbes.com

11–20 of 435 posts

Re: Another Ransomware Outbreak Is Going Global

#11

store important stuff on external hard drives never download suspicious stuff specially from emails

As if this attack purely relied on people clicking on emails. Maybe that's 1 person out of 10.000 but obviously this used various other methods to spread.

Re: Another Ransomware Outbreak Is Going Global

#12
The Netherlands and various other countries have created laws where either their version of the NSA and/or police can hoard 0days to be used for hacking.

This massive outbreak is so widespread that at this stage it appears that it either was a very recent 0day or something which only recently was fixed by a patch.

Instead of having loads of countries hoarding security problems I highly encourage a focus on security instead. Seems much better for the economy overall.

Re: Another Ransomware Outbreak Is Going Global

#13

store important stuff on external hard drives never download suspicious stuff specially from emails

That's not enough anymore: good ransomware will look for backup systems and wipe those out before proceeding. You need read-only, airgapped backups before you can consider yourself safe.

A continuous back-up system should be enough --as long as it doesn't have the smarts to reset the encryption pwd on the backup set.

Re: Another Ransomware Outbreak Is Going Global

#14
post #10

Earlier quoted context omitted.

That's not enough anymore: good ransomware will look for backup systems and wipe those out before proceeding. You need read-only, airgapped backups before you can consider yourself safe.

That doesn't help for targeted attacks, which corrupt the backups as they are being written. Not sure how to protect against that though.

Use a filesystem that lets you take regular snapshots, like zfs.

Re: Another Ransomware Outbreak Is Going Global

#15
post #10

Earlier quoted context omitted.

That's not enough anymore: good ransomware will look for backup systems and wipe those out before proceeding. You need read-only, airgapped backups before you can consider yourself safe.

That doesn't help for targeted attacks, which corrupt the backups as they are being written. Not sure how to protect against that though.

They can corrupt one backup but not all backups. And a good backup software should do integrity check.

Re: Another Ransomware Outbreak Is Going Global

#17
post #12

The Netherlands and various other countries have created laws where either their version of the NSA and/or police can hoard 0days to be used for hacking. This massive outbreak is so widespread that at this stage it appears that it either was a very recent 0day or something which only recently was fixed by a patch. Instead of having loads of countries hoarding security problems I highly encourage a focus on security i…

In theory, yes. In practice, the reality may be more complicated. How many ongoing investigations and clandestine operations rely on 0days that could be patched tomorrow?

Even if this weren't the case somehow, I could imagine intelligence chiefs and the like defending their 0days as necessary on public safety or national security grounds.

Edit: just to clarify, I believe 0days should be reported and patched to make everybody safer.

Re: Another Ransomware Outbreak Is Going Global

#18

store important stuff on external hard drives never download suspicious stuff specially from emails

You do know that most of these use vulnerabilities that doesn't need human interaction once they hit the local network, right?

External hard drives do come handy though.

Re: Another Ransomware Outbreak Is Going Global

#19
post #10

Earlier quoted context omitted.

That doesn't help for targeted attacks, which corrupt the backups as they are being written. Not sure how to protect against that though.

Use a filesystem that lets you take regular snapshots, like zfs.

This is good for now, but snapshots are like RAID: they are not backups.
Post reply on HN