This month, GandCrab was diverted from the two ransomware families of Paradsie and Sodinokibi, resulting in a significant drop in the amount of transmission. The situation of the Sodinokibi ransomware spread through the vulnerability The following is a situational picture of 360 Brain of Safety detecting the spread of the ransomware through the vulnerability.įigure 6.
There are two methods for spam propagation: the first method is to disguise the exe program to spread the image attachment the second method is to use the macro of the Word document to spread. In addition, The ransomware also uses spam to spread.
Bitmessage ch code#
Comparison of types of infected systems in March 2019 and April 2019Īt the end of April, 360 Brain of Safety monitored the ransomware transmission using a variety of methods, mainly using the WebLogic Remote Code Execution Vulnerability CVE-2019-2725 just revealed at the end of this month and attacking Windows servers with other vulnerabilities. Proportion of infected systems in April 2019Ĭomparing the infected system in March and April of 2019, it was found that the proportion of personal systems and server systems in the infected system in the two months was relatively stable, and the change was not very large.įigure 5.
Bitmessage ch windows 7#
Among them, Windows 7 system ranked first in all system versions with 41.73%, but it has a downward trend compared with 49.71% in the previous month.įigure 4. Ransomware feedback distribution map for April 2019įrom the proportion of infected systems, the top three in this month are still Windows 7, Windows 2008 and Windows 10.
The main reason for the decline in the GandCrab family is that GandCrab’s transmission channel is also diverted by two other ransomware, Paradise and Sodinokib.įigure 3. This month’s ransomware family accounted for the proportion: GandCrab ransomware slipped to second place, accounting for 24.78% this month while GlobeImposter returned to the top with 35.4% Crysis ransomware accounted for 16.81% Continue to stay in third place. The two peaks of feedback are caused by the increase in the number of ransomware families.įigure 2. From the family of user feedback, there is no big outbreak in a single family. Ransomware feedback statistics for the past 12 monthsįrom the distribution of feedback volume, there are two peak feedbacks this month: April 11 and April 17 respectively. At the same time, there are two new ransomware worthy of attention this month: the Planetary ransomware distributed through the Windows domain, and the Sodinokibi ransomware (“Lock Blue” ransomware), which is highly coincident with the GandCrab transmission channel.įigure 1. The 360 decryption tools added a new hacking virus for PokemonGo, Stop/KeyPass and SadComputer this month.Īccording to the statistics of the feedback data of the extortion virus in April 2019, this month’s feedback has a small decline compared with March.
Sodinokibi, Planetary and MegaCortext ransomware were added this month. From the data of this month, the feedback volume of anti-Lex virus has decreased slightly. 360 Brain of Safety has carried out comprehensive monitoring and defense against ransomware.
With the spread of ransomware, it has brought serious threats to enterprises and individuals.
0 kommentar(er)
