Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

Two pieces of malware killed by white hats, save the day

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.

July 25, 2016

It is reported today that 2 pieces of malware have been killed by white hats, making the world a safer place.

To be sure, the so-called 'PowerWare' and 'Bart' malware have been dismembered and laughed at by white hats who found security flaws that allow user machines infected by current forms of the threats to decrypt their files for free.

Tyler Halfpop, Jacob Soo and Josh Grunzweig, together with a separate team of AVG engineers Jakub Kroustek and Peter Conrad, found the malware and killed it right in its tracks.

The team has increasingly become popular ever since decrypting ransomware became something of a sport among the anti-malware community.

Halfpop, Soo, and Grunzwieg described their victim, PowerWare, revealing that while it was popping hospitals, it was lamb dressed as lion and imitated the fiercer Locky ransomware but sported much weaker encryption and, fatally, hardcoded keys.

Kroustek and Conrad enjoyed mimicking Bart, explaining that the password-zipping ransomware can be made to look meek using AVG's slick decryptor that will release files by comparing unencrypted files to the encrypted original.

Anti-malware writers have flayed scores of ransomware variants, with collaboration among firms helping to minimize their work.

The decryption is possible thanks to poor coding and implementation of various encryption schemes, but not through breaking ciphers itself.

The latest versions of CTB Locker, Cryptowall, and Locky ransomware to date appear to stand unbroken, forcing victims to restore backups or pay the ransom and cross their fingers that their files will come back ok.

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.


Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact
Copyright © Internet Security.ca    Terms of use    Privacy agreement    Legal disclaimer