New Ransomware CryptoFortress Encrypts Unmapped Network Shares

Used to be that ransomware only looked at hard drive C:, and then any other mapped drives like D:, E:, F: etc., but now a newly discovered strain called CryptoFortress was discovered yesterday by security researcher Kafeine that has stolen the look & feel of TorrentLocker but is a whole new malicious strain. It would be a bit much to call this a new generation, but it certainly is a powerful new feature.

CryptoFortress includes the new and nasty feature of being able to encrypt files over network shares even if they are not mapped to a drive letter. Normally when ransomware encrypts your data it does so by retrieving a list of drive letters on a computer and then encrypting any data on them.......

http://blog.knowbe4.com/new-ransomware-cryptofortress-encrypts-unmapped-network-shares

 

Wonder would "Crypto Monitor" Starbuck suggested recently catch before infestation.?

Starbucks Link.

http://www.bleepingcomputer.com/for...ypto-ransomware-before-it-encrypts-your-data/

 

On a different thread of Tony's, he could have done with installing that Crypto Monitor!
However, reading up on how Crypto Monitor works, I would think it has a good chance of trapping even that latest one.
I have taken some notice of it and downloaded the free version, once I install it I can report on my impression of it at some later date.

Nev.

 

Tony I am putting Crypto Prevent and Unchecky now on every computer I service and explaining how to update Crypto Prevent. I have to get that into my 6 step memo for success I leave everyone and tell them iof they do all those things faithfully, they will not get reinfected.