App Review New MBR Locker Ransomware

[cruelsister]

The ransomware has been given a name since I made the video; it's now called Satana. But remember the important thing is the mechanism and not the name.

 

[XhenEd]

I think HMP.A 3.5 Beta will be able to prevent this. That's the thing, it's in a private beta testing, and so it cannot/shouldn't be tested publicly yet.

WAR still rocks!

 

[Captain Awesome]

Great!!!

 

[XhenEd]

Title of the soundtrack, please?

 

[Noxx]

Blackhats crying themselves to sleep everynight over WAR. Probably not, unfortunately, because your average victim doesn't even have an AV, and if they do, the AV isn't good enough. Good stuff as always, CS.

 

[Shran]

Thank you for the video.

This might be a doofus question, but does MBR encryption threaten disks which are GPT/GUID partitioned instead of MBR partition table?

 

[cruelsister]

S- Yeah, it would

X- Enya- "One by One". Wasn't sure how this one would go over.

 

[frogboy]

Another good reason to make backups with Macrium Reflect or similar software and your MBR is backed up as well and you are covered.

 

[Shran]

Now I wonder if Shadow Defender shall protect against the MBR encryption as well, it's supposed to protect MBR right? I'd love to see a test result for that if someone has a sample & doesn't mind doing it if they aren't busy.

 

[Noxx]

Another good reason to make backups with Macrium Reflect or similar software and your MBR is backed up as well and you are covered.

Yes and people think backing up their data isn't important. Getting infected with ransomware is horrible indeed, but if you backup crucial data...

 

[Deleted member 178]

Now I wonder if Shadow Defender shall protect against the MBR encryption as well, it's supposed to protect MBR right? I'd love to see a test result for that if someone has a sample & doesn't mind doing it if they aren't busy.

SD does protect the MBR , CS did a video with Pitya.

 

[NullByte]

I wonder if will bypass COMODO with default settings.

 

[jamescv7]

Hopefully the first two product should always adapt more massive changes on ransomware analysis, clearly a partial block and insufficient backup plan to provide termination process of that threat.

Unlike WAR as clearly focus very well on possible same like malicious behavior activity.

 

[Der.Reisende]

Very good video, Thank you for sharing Sis
Enya is a very good choice!
I wonder if Qihoo would be able to even prevent MBR encryption?

 

[DJ Panda]

Blackhats crying themselves to sleep everynight over WAR. Probably not, unfortunately, because your average victim doesn't even have an AV, and if they do, the AV isn't good enough. Good stuff as always, CS.

What kind of AV is good in your opinion?

Great video BTW.

 

[done]

great video again thank you for sharing