Beware the 'Bad Rabbit'

Forumite Members General Topics Tech Security Talk Beware the 'Bad Rabbit'

Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • #13067
    Ed PEd P
    Participant
      @edps
      Forumite Points: 39

      A new brand of ransomeware is sweeping Europe and the US. It has been termed ‘Bad Rabbit’. So far there is little from GCHQ on the malware, or how it spreads. Gizmodo publicises a ‘vaccine’, but unfortunately this looks too trivial to be a long term fix.

      It is reported to be targeted at Corporates and spread by a fake ‘Update Adobe Flash‘ link, but I think an offsite backup and exercising care may be the best approach for now.

      #13069
      Ed PEd P
      Participant
        @edps
        Forumite Points: 39

        El Reg  has more info on its dispersal vectors – Media sites, fake flash updates then SMB network attacks seems to be its route for now.

        #13080
        Bob WilliamsBob Williams
        Participant
          @bullstuff2
          Forumite Points: 0

          Checked with Kaspersky, courtesy Alex Perekalin:

          Bad Rabbit: A new ransomware epidemic is on the rise

          Kas are offering free Ransomeware protection for Business, if you use Kaspersky:

           

          When the Thought Police arrive at your door, think -
          I'm out.

          #13088
          The DukeThe Duke
          Participant
            @sgb101
            Forumite Points: 5

            I wouldn’t trust kaspersky. Too many bad stories lately. No doubt they do a good job, at the whole Mcafee routine, and their product does some good,  maybe??

            Their American and Russian rumoured links would be enough to take it off my pc, especially given its not really needed. It’s not like it’s an os, we can’t easily ditch windows for instance. But Kas, I wouldn’t trust.

            #13091
            Dave RiceDave Rice
            Participant
              @ricedg
              Forumite Points: 7

              I certainly trust Kaspersky as much as any of the others i.e. they all have close ties with their home governments. They consistently top the reviews year after year and that’s good enough for me.

              The home version of McAfee I wouldn’t touch, but I administered the Corporate version for 5 years and it’s very good in that environment (it’s a totally different way of working). It’s used in the Defence Industry so who knows what the American spooks have put in there (industrial espionage). Probably no need as the parent company (Intel) have done it all anyway.

              I administer the small business version of Bitdefender (Gravityzone) for the charity (lots of W10 PCs but no Windows Domain) and again that’s very good in that environment (central management but not to the same scale as Corporate). I have attended some of their excellent SMB orientated seminars. But the home version will be such a different beast I couldn’t comment. Bitdefender is Romanian, tin foil hats at the ready.

              Eset I have no experience of but have heard good things despite them being Slovakian.

              Avira is German, Avast / AVG are Czech, F-Secure is Finnish and Trend Micro is Japanese.

              Bullguard is British but it’s founder is Danish.

              Mon Dieu!  Ou est La France?

              #13093
              The DukeThe Duke
              Participant
                @sgb101
                Forumite Points: 5

                But for a home user you need non of what you mentioned. Even more today with win 10, it’s pretty locked down out of the box. (aside form it’s constant  connection to the mother ship).

                Or better yet, use chrome os, seems to be the old mac type of affair. Not enough users to make it worth while to attack. Though the big G, has the same grip on the os as MS do with 10.

                Today I think we should be looking more at mobile os and securing those, as both Android and ios, have big markets. Android now has more active devices than windows. I think it wad about two months ago that milestone was announced.

                The worry with phone os, and the way we use it today, is how much it can we k your life if hacked. Especially financially.

                I do love listening to Steve Gibson security now pod cast. Honestly the guy is that clever in the subject, I understand probably 20% of what he says, but I do listen to his conclusions and take them on board.

                I’m not sure he has give up xp either. But he is clued up enough to do that if he wishes, us mortals sadly arnt.

                A case of do as I say, not as I do.

                Probably the same with AV, if you’re careful enough, people like Steve Gibson and leo Laporte often talk off air (you get to see behind the scenes if you watch live) about not using an AV at all. The caveat is today the av doesn’t take up valuable cpu power like it historically did. They say they don’t use avs and never get in trouble. But they don’t advertise or re one it. Now with 10 I don’t think you can go ‘bareback’ anymore, having to have ms turned on, or something in its place.

                Ive never needed an av outside of ms security essentials / defender, before that I used avast I think, only cos uni made us all use that. Iirc I used avg to before.

                 

                #13101
                Ed PEd P
                Participant
                  @edps
                  Forumite Points: 39

                  Steve although Win10 is fairly secure you still need something to handle the flaws in apps and progs. (as a very bad example – Adobe carp). Get a drive-by and you could still be in trouble. For that reason you need something that at least handles the common or garden carp – any NSA Win10 ero days that have got out in the wild (still a lot of em)and you are stuffed anyway. Kaspersky is probably better set up to handle these anyway!

                  #13104
                  Wheels-Of-FireWheels-Of-Fire
                  Participant
                    @grahamdearsley
                    Forumite Points: 4

                    Did you hear the CCleaner update site got hacked or redirected ?

                    Anyone who did an update in the few hours before it was spotted got a very nasty surprise.

                  Viewing 8 posts - 1 through 8 (of 8 total)
                  • You must be logged in to reply to this topic.