Hi Dave – it was intended as an observation on the fact that it now seems it was an amateur attack – including crap code, basic errors as below ( from EdP’s post ) and mistakes.
Most of the whoopsies make it possible to restore files with the help of publicly available software tools. In one case a mistake in the malware’s read-only file processing mechanism does not allow it to encrypt read-only files at all. Instead, the malware creates encrypted copies of the files, while the original files remain untouched and are only given a “hidden” attribute, which is easy to undo
It could then be taken on-board by those perpetrators as a lesson on how to improve it and get it right for next time. Being told where you went wrong gives them the opportunity to issue a better improved MkII version which despite Kasperky et al’s best efforts, will then still catch a lot of people out.
My last sentence – I do realise that Kaspersky and others are using the info to refine their protection algorithms, but there will still be a lot out there with less than basic protection, even after this latest episode. :negative: – was similar to what Ed said – ……….. the Internet is a modern Wild West and they had better come well protected. and what Dave said – It’s those that ignored the freely available information that got caught with their pants down.
That was where I was coming from. :good:
EDIT – I suppose what I’m saying is if the Police explain everything a burglar did wrong, who didn’t realise he’d trodden on a pressure pad and walked through an infra-red beam, setting off a silent alarm, he’ll know what look out for next time and do a better job of burgling!!
