Bart Ransomware – Daily Security Byte EP. 280

You might be sick of ransomware, but that won’t stop criminals from releasing new variants. Bart is the latest extortion malware that arrives as a zipped JavaScript file. Watch Monday’s Byte for a Firebox tip on how you might avoid this new threat. 

(Episode Runtime: 3:03

Direct YouTube Link: https://www.youtube.com/watch?v=20VCvOgML-0

EPISODE REFERENCES:

• Locky attackers behind new Bart ransomware – Proof Point
• Ransomware domains up 3500% – Dark Reading

— Corey Nachreiner, CISSP (@SecAdept)

Morphing Ransomware Factory – Daily Security Byte EP. 269

In past videos, I’ve talked about how malware variants often “morph” to evade signature-based malware detection. Today’s video covers research showing just how often attackers change their ransomware variants. Watch to learn why you need better ways to catch modern malware and ransomware.

(Episode Runtime: 4:08)

Direct YouTube Link: https://www.youtube.com/watch?v=8PFL8kA-Dp8

EPISODE REFERENCES:

• Ransomware morphs every 15 seconds – IBTimes
• Blog post describing the Cerber Malware Factory – Invincea

— Corey Nachreiner, CISSP (@SecAdept)

Petya Decryptor – Daily Security Byte EP. 246

Let’s start the week off with some good security news for once. Remember that Petya master boot record (MBR) ransomware I warned you about a few weeks ago? Well, a white hat hacker has created a decrypter for it that recovers infected files for free. Watch today’s video to learn more.

(Episode Runtime: 1:41)

Direct YouTube Link: https://www.youtube.com/watch?v=GmW6pHFxjgU

EPISODE REFERENCES:

• Petya ransomware cracked – Computer World
• Petya ransomware defeated by the good guys – Bleeping Computer
• Researcher’s free Petya decrypter – Herokuapp.com

— Corey Nachreiner, CISSP (@SecAdept)

Ransomware Exploits Flash 0day – Daily Security Byte EP. 244

Next week is Microsoft and Adobe’s Patch Day. However, on Thursday Adobe released an emergency security advisory to fix a zero day Flash vulnerability. Watch the episode below to learn why you should get this update to avoid drive-by download attacks pushing ransomware.

(Episode Runtime: 1:44)

Direct YouTube Link: https://www.youtube.com/watch?v=F2MKTU9ZIO4

EPISODE REFERENCES:

• Emergency Adobe Flash Security Advisory and update – Abode
• Ransomware using Flash 0day in drive-by download – Reuters

— Corey Nachreiner, CISSP (@SecAdept)

Petya Ransomware – Daily Security Byte EP. 240

As if ransomware wasn’t already bad enough, a new sample is trying to up the extortion pressure by encrypting your whole hard drive. Watch today’s video to learn more about this new threat, and why I think its novel tactics might backfire.

(Episode Runtime: 4:36)

Direct YouTube Link: https://www.youtube.com/watch?v=E3lAlzjDvUE

EPISODE REFERENCES:

• Trend Micro’s blog on Petya ransomware – Trend Micro
• G Data’s blog on Petya ransomware – G Data
• Bleeping computer Petya ransomware write-up – Bleeping Computer
• New ransomware encrypts your hard drive – PC World
• VirusTotal results for Petya sample – Virus Total

— Corey Nachreiner, CISSP (@SecAdept)

Ethical Hackers Spread Ransomware – Daily Security Byte EP. 239

If you visit a site to get your ethical hacking certification, you’re probably not expecting to get a dose of ransomware along with it. However, that’s exactly what might have happened if you visited the CEH website recently. In today’s video I share a warning from Fox IT about an ironic website hijack.

(Episode Runtime: 2:36)

Direct YouTube Link: https://www.youtube.com/watch?v=9WT1NNhlCmE

EPISODE REFERENCES:

• Researchers warn of hacking certification site spreading ransomware – Fox IT
• CEH website hijacked my Angler EK – Ars Technica

— Corey Nachreiner, CISSP (@SecAdept)

Mac Ransomware – Daily Security Byte EP. 226

Antivirus companies have found incomplete versions of Mac ransomware, researchers have created proof-of-concept (PoC) variants to demonstrate the possibility, and criminals have experimented with ineffective web-based “policeware” for Macs, but we’ve not seen Cryptolocker-level ransomware targeting Macs in the wild… that is until now. Watch today’s Security Byte video to learn more about the new KeRanger ransomware, and how to defend yourself against it.

(Episode Runtime: 4:42)

Direct YouTube Link: https://www.youtube.com/watch?v=9wPy8GaX10g

EPISODE REFERENCES:

• Researcher’s post on ransomware in OS X Transmission installer – Palo Alto Networks
• Reuters article on Apple Ransomware – Reuters
• Article about KeRanger and past Mac ransomware – Digital Trends
• Transmission’s site with ransomware alert – TransmissionBT
• Updates on how the Transmission hack happened – MacRumors

— Corey Nachreiner, CISSP (@SecAdept)

Locky Ransomware- Daily Security Byte EP. 222

If you only watch the Daily Security Bytes, but don’t read the blog, you may have missed our recent written post on the Locky ransomware. Today’s episode quickly summarizes this post and why you should read it to make sure you’ve configured the WatchGuard defenses that can keep this kind of threat off your network.

(Episode Runtime: 2:24)

Direct YouTube Link: https://www.youtube.com/watch?v=zJcM3CrZV6s

EPISODE REFERENCES:

• Jonas Spieckermann’s post on the Locky ransomware and how WatchGuard helps  – WatchGuard Blog

— Corey Nachreiner, CISSP (@SecAdept)

Hospital Held Ransom – Daily Security Byte EP. 219

Crypto ransomware has plagued consumers and small business for a few years now, but when it affects hospitals things get dangerous. Watch Friday’s Byte to learn how ransomware forced a hospital in LA back to the paper age, and what you can do to prepare your organization from a digital disaster.

(Episode Runtime: 2:46)

Direct YouTube Link: https://www.youtube.com/watch?v=Ju3GgKlpNB0

EPISODE REFERENCES:

• LA Hospital victimized by crypto ransomware – Ars Technica

— Corey Nachreiner, CISSP (@SecAdept)

Two Phishing Breaches – Daily Security Byte EP. 208

This week, two different organization’s in two different industry verticals suffered security incidents that either lost them tons of money, or tons of time. What do they both have in common, and what can we learn from them? Watch today’s video to find out!

(Episode Runtime: 3:26)

Direct YouTube Link: https://www.youtube.com/watch?v=crBB4CU-cTs

EPISODE REFERENCES:

• Ransomware infects Israel Energy Authority and disrupts network – ComputerWorld
• Cyber criminals steal $55M from an aerospace manufacturer – IBTimes
• A article on the changes in phishing emails – IT Pro Portal

— Corey Nachreiner, CISSP (@SecAdept)