Ransomware Hits Law Firm, Encrypts Workstation

Status
Not open for further replies.

Jack

Administrator
Thread author
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
A computer belonging to Ziprick & Cramer law firm got infected by ransomware with file-encryption capabilities; the malware piece also affected the content in shared folders.

The company turned to its “computer specialist” in order to determine the nature of the files that got encrypted illegally, and the information they stored on the systems. The incident occurred on January 25.

Type of data encrypted is unknown
Although a simple scrub of the hard disk may have sufficed, the law firm removed the infected workstation in order to redeem the integrity of its network.

Other machines have not been reported to be affected, even if they had access to the compromised folders shared over the network by the workstation that was infected initially.

As the administrators of the company learned from the security experts called to help with determining the type of data lost as a result of the attack, this type of ransomware threat does not usually exfiltrate information from the target; it only encrypts it and asks for a ransom in exchange for its decryption.

Read more: http://news.softpedia.com/news/Ransomware-Hits-Law-Firm-Encrypts-Workstation-and-Server-474788.shtml
 

miketan77

Level 3
Verified
Jul 24, 2014
104
Need some software to prevent this kind of attack on our computer system. Whether antivirus software and firewall enough for computer security?
 

Blackhawk

Level 3
Verified
Jun 11, 2014
149
Was this Cryptowall? Maybe I didn't see it, but there were no specifics in this case? I know Cryptowall encrypts your data obviously, but does it also STEAL your data?
 

soccer97

Level 11
Verified
May 22, 2014
517
If it was ransomware, HitmanPro Alert may have prevented it (v3 upcoming). I hope they made daily backups and can recover from those. If it were me, I would be checking every workstation since it a law firm. I think Kaspersky has some good (and free) tools available for non-commercial use:

http://support.kaspersky.com/us/viruses/disinfection

You just have to know what you are doing with those rescue Linux based discs when cleaning an infected Windows PC.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top