Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Another Ransomware Outbreak Is Going Global

forbes.com

Post reply on HN
Print view View original

51–60 of 435 posts

Re: Another Ransomware Outbreak Is Going Global

#51

Post by Flammy »

simopaa wrote: post #32
nuclx wrote: post #25

As someone affected by the ransomware - did anyone else notice empty console windows popping up from time to time the days before the ransomware triggered the encryption?

This is most likely due to the Office bug: https://www.digitaltrends.com/computing/here-is-a-fix-for-mi...

Agreed. Previously following the steps here removed the problem for me on 3 different Windows 10 computers.

(PC gamers were particularly impacted by this, as the command prompt flickering would minimize full screen games...)

Re: Another Ransomware Outbreak Is Going Global

#52

Post by paulpauper »

nyolfen wrote: post #31
mbaha wrote: post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

it seems like a trivially avoidable mistake to use a single wallet for all collections, but maybe i shouldn't be giving them ideas...

how do you konw it's only one wallet

Re: Another Ransomware Outbreak Is Going Global

#53

Post by strictnein »

mbaha wrote: post #20

A friend sent me the bitcoin address, they've already collected 2600$. [EDIT] Now 3230$ Source: https://blockchain.info/address/1Mz7153HMuxXTuR2R1t78mGSdzaA...

I like one of the more recent transactions:

https://blockchain.info/tx/82698e1f2fbf31914019da738e24515ae...

For 0.0000666 BTC. Sender is theoretically 1FuckYouRJBmXYF29J7dp4mJdKyLyaWXW6

Re: Another Ransomware Outbreak Is Going Global

#55

Post by idlewords »

paulpauper wrote: post #47
tobltobs wrote: post #40

Earlier quoted context omitted.

Why would the malware care about if it is an external or internal drive?

If you back your files up on the usb drive on Tuesday, remove the drive after back u the files, and get infected on Wednesday, the files on the drive obviously are not going to be infected.

If you remove the drive. Lots of backups are done on to always-connected devices.

Re: Another Ransomware Outbreak Is Going Global

#56

Post by vldx »

Interestingly, WPP mandates all it's employees to shut down their computers – irrespective of the OS.

> As a precaution, WPP is mandating that everyone immediately shut down all computers, both Macs and PCs. This applies to you whether you are in the office or elsewhere. Working on an office computer remotely is not an option. Please leave your computers turned off until you hear from us again.

> Many thanks for your co-operation and patience.

> Best regards,

Re: Another Ransomware Outbreak Is Going Global

#57

Post by thedz »

paulpauper wrote: post #47
tobltobs wrote: post #40

Earlier quoted context omitted.

Why would the malware care about if it is an external or internal drive?

If you back your files up on the usb drive on Tuesday, remove the drive after back u the files, and get infected on Wednesday, the files on the drive obviously are not going to be infected.

yes, that's exactly what he said:

> You need read-only, airgapped backups before you can consider yourself safe.

Re: Another Ransomware Outbreak Is Going Global

#58

Post by SpeakMouthWords »

vldx wrote: post #56

Interestingly, WPP mandates all it's employees to shut down their computers – irrespective of the OS. > As a precaution, WPP is mandating that everyone immediately shut down all computers, both Macs and PCs. This applies to you whether you are in the office or elsewhere. Working on an office computer remotely is not an option. Please leave your computers turned off until you hear from us again. > Many thanks for your…

How do they plan on contacting the employees en masse if the computer is off?

Re: Another Ransomware Outbreak Is Going Global

#59

Post by hsod »

SpeakMouthWords wrote: post #58
vldx wrote: post #56

Interestingly, WPP mandates all it's employees to shut down their computers – irrespective of the OS. > As a precaution, WPP is mandating that everyone immediately shut down all computers, both Macs and PCs. This applies to you whether you are in the office or elsewhere. Working on an office computer remotely is not an option. Please leave your computers turned off until you hear from us again. > Many thanks for your…

How do they plan on contacting the employees en masse if the computer is off?

Probably via their smart phones
Post reply on HN