Analysis of the Locky infection process

In recent months, there has been a significant increase in the number of networks and users affected by ransomware known as Locky, which is used to encrypt a victim’s files and then demand a ransom to be paid in bitcoins. But, how does this threat manage to infiltrate computer systems and hijack data? From the ESET Research Lab in … More Analysis of the Locky infection process

World Backup Day is a good opportunity to check whether your data is really safe

Yes, it’s obvious that data should be kept safe. And yes, it’s clear that part of all protective measures deployed, the ability to restore the data from a back-up should be kept on top. But no, it’s still not common practice that data is properly backed up. Well, World Backup Day is here to remind … More World Backup Day is a good opportunity to check whether your data is really safe

Ransomware threat highlights why backing up data is essential

Noticeably, over the last two years, there has been a marked increase in ransomware attacks, which is, in its simplest form, a type of malware that is executed for the principal reason of extortion. The malicious software, once deployed, encrypts data, as well as devices. Access is only achievable if the victim pays a ransom … More Ransomware threat highlights why backing up data is essential

Banks ‘should not compensate’ victims of online fraud

UK Metropolitan police commissioner Sir Bernard Hogan-Howe has advised banks not to offer compensation to victims of online fraud, arguing that the increased risk will encourage people to better protect themselves against cybercrime. Speaking in an interview with The Times, Mr. Hogan-Howe suggested that by removing the safety blanket of compensation, internet users would think … More Banks ‘should not compensate’ victims of online fraud

Meet Remaiten – a Linux bot on steroids targeting routers and potentially other IoT devices

ESET researchers are actively monitoring malware that targets embedded systems such as routers, gateways and wireless access points. Recently, we discovered a bot that combines the capabilities of Tsunami (also known as Kaiten) and Gafgyt. It also provides some improvements as well as a couple of new features. We call this new threat Linux/Remaiten. So far, … More Meet Remaiten – a Linux bot on steroids targeting routers and potentially other IoT devices