The No More Ransom Project

#1

Post by esalman » Sun, Oct 30, 2016, 6:34 PM UTC

The No More Ransom Project
nomoreransom.org

Re: The No More Ransom Project

#2

Post by rhapsodic » Sun, Oct 30, 2016, 7:34 PM UTC

I'm afraid to click the link. Anyone care to provide a tl;dr?

Re: The No More Ransom Project

#3

Post by philippnagel » Sun, Oct 30, 2016, 7:38 PM UTC

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

It's legit. Informational website about ransomware and what to do in case your device is affected. Apparently sponsored/endorsed/whatever by Europol, the Dutch Police, Kaspersky, Intel, AWS and Barracuda.

Re: The No More Ransom Project

#4

Post by foota » Sun, Oct 30, 2016, 7:38 PM UTC

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

Looks like decryption for badly constructed ransom ware

Re: The No More Ransom Project

#5

Post by elorant » Sun, Oct 30, 2016, 7:42 PM UTC

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

Anytime you're in a similar dilemma just disable JavaScript. There are even plugins that allow you to do that with one click.

Re: The No More Ransom Project

#6

Post by toennisforst » Sun, Oct 30, 2016, 7:43 PM UTC

> When [you are infected with ransomware], you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay!

What bothers me about their advice is that it is only correct macroeconomically. For your particular case it could be the best solution to just pay - as even police departments have done before.

It also ignores that it is in cybercriminals' best interest to let you decrypt after you paid: They need their victims to trust them, and they have nothing to gain from keeping the files encrypted after payment.

Re: The No More Ransom Project

#7

Post by rhapsodic » Sun, Oct 30, 2016, 7:44 PM UTC

philippnagel wrote: post #3

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

It's legit. Informational website about ransomware and what to do in case your device is affected. Apparently sponsored/endorsed/whatever by Europol, the Dutch Police, Kaspersky, Intel, AWS and Barracuda.

> It's legit. Informational website about ransomware and what to do in case your device is affected.

That's good to know, but the ransomware criminals probably have the skills, and they definitely have the incentive, to pwn that site.

Re: The No More Ransom Project

#8

Post by kintamanimatt » Sun, Oct 30, 2016, 7:50 PM UTC

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

Why are you afraid to click the link?

Re: The No More Ransom Project

#9

Post by rhapsodic » Sun, Oct 30, 2016, 7:58 PM UTC

kintamanimatt wrote: post #8

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

Why are you afraid to click the link?

> Why are you afraid to click the link?

Because ransomware criminals would probably love to take over that site and start distributing ransomware or other malware from it. And I have no way to judge how well that site's owners have protected it from that sort of attack. When I'm in doubt, I tend to err on the side of caution.

Re: The No More Ransom Project

#10

Post by nitrogen » Sun, Oct 30, 2016, 7:59 PM UTC

elorant wrote: post #5

rhapsodic wrote: post #2

I'm afraid to click the link. Anyone care to provide a tl;dr?

Anytime you're in a similar dilemma just disable JavaScript. There are even plugins that allow you to do that with one click.

JS is not the only attack surface in a browser. There have been exploitable bugs in image parsers, font renderers, etc. Tracking is possible without JS as well.

Maybe try lynx?