Record · corpus.blog/posts/01a0e45f-f4d8-7202-8ad4-dd58434e398b

More ransomware shenanigans

bartblaze.blogspot.com · published 13 November 2015

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bartblaze.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 36
Words captured: 1,372

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

http://www.bleepingcomputer.com/news/security/cryptowall-4-0-released-with-new-features-such-as-encrypted-file-names/

bleepingcomputer.com

http://blog.checkpoint.com/2015/11/04/offline-ransomware-encrypts-your-data-without-cc-communication/

blog.checkpoint.com

http://blog.botfrei.de/2015/11/chimera-ransomware-focuses-on-business-computers/

blog.botfrei.de

http://vms.drweb.com/virus/?i=7704004&lng=en

vms.drweb.com

https://twitter.com/BleepinComputer

twitter.com

http://www.bleepingcomputer.com/news/security/shoddy-programming-causes-new-ransomware-to-destroy-your-data/

bleepingcomputer.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9VYEayBluxzkIZjYeWpQKpMrnwOvakughLb5EyZGxPPM8Vv5LILsoX9R7Nh4NHgSBMpw3BIRRZzzTVKu9Ow_JblTpedwN7zokwDQwjz_7Bya3D05bWhTm3DMfVG1XxLlTIoGCZKVsi6qa/s1600/ransom2.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0QTz-vGQB6VkbLe3lj_njyXn2imvOoqR88hsgXIvAssZfjHwNp6rE2dWzMSqxfh745UfvAD7CUWMPKjIkO36mgsoZTy4TO63hq54KKLadH2XWqhjHjuj12Qqke-1nAM-iQYOx_AhlZHcE/s1600/ransom.PNG

blogger.googleusercontent.com

http://www.ipvoid.com/scan/45.63.12.192/

ipvoid.com

http://whois.domaintools.com/45.63.12.192

whois.domaintools.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxQBSI2E7ydm5fl3N4rD3hmY9PKox_dUt4Oo5Ph9_sOpTKUqqGPrGG89ZAZ1fVkUGDTm1QrC3TFad06PRJx5GA7DSU0g42CTpKiTTBVX9E_YIIv3eBw1m81FTCrtrSJNP7D0evAnT4Qw8x/s1600/ip.PNG

blogger.googleusercontent.com

https://www.virustotal.com/en/ip-address/45.63.12.192/information/

virustotal.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAuQMoxv1kuE8TYyDjNfFVwiY9gRkdyXngKP9s1YyJwpLZ6qnjWgBUFnOLSjrdeARBVA2Ch8wHAomQZP4xUTN1zs-sQTzygtB27bCtURcogfE4iM9mJEHfPtGi1mKqmiViIrZ7XlYI29yU/s1600/vbs.PNG

blogger.googleusercontent.com

https://technet.microsoft.com/en-us/magazine/ff629472.aspx

technet.microsoft.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM9c4C0_ZufxL0uPqJkAE-jD2BPT_Ip6Bv5lxe9V8I3Rpqvk6g19jRRA5y_wHdF19LcQSRut65xWWp-BII3S7hAU6XLn_L1T6Pq04kP-HgGuZAerarEQDsYC8HWNto8bCbzRokWT09dgiX/s1600/oppna.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_CHA6Q0qJkAlW6_cFYql53pG45saGSB2f0vlZmn27pCCWuDhqr-691a2cvauqzeQrtvQZAiYdmPdbv-6mZH35ge9JoA3fslFx1n6Ao8IzVqGBShwjKbpt4QqbB3RNEBClssjarMSHt2L7/s1600/msg.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh16DuNfd5-Jx9hPCMPo1lf__eFxpdt51PdDbQnC1XHNLLy_SxEV65Q6e8IQSeA-2LvW1KeU-6cV5eRc4aTcttqK4bi5dtR2HJyyMlC8iS8K-VqxVPOeqXj8U8GC0fOryB0Zu-m39xvS7iL/s1600/rnsm.png

blogger.googleusercontent.com

https://twitter.com/DecrypterFixer

twitter.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS2gsnob01fTuW2EAW8zU3yElY-LPS4plUyshtrv2e4BjY4l1MZti23TIZUP_8lw_J9VChZqZvyEvElvjq_LOMmp_r5yz-L79HXl8Ev2lEwJ7tZPPRlrRdPECUbgyWuJ2g2dqp9MBFmou_/s1600/enc.png

blogger.googleusercontent.com

http://www.bleepingcomputer.com/forums/t/530294/poshcoder-malware-removal/?p=3338793

bleepingcomputer.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIRx3kaO59irZIZmQD0R3YXXAYu3AvOv6Ay4dXPfucxbVllizjmqBpFjvv9QgMic80R_tv6qC7OLknqyWZwbcVbL5G4PDh4ON9vU9Rq-9RMLyy30H3egsrJGv4Sv-p1FBwVGCtiQ619D03/s1600/msgcw.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPITRdVNMtUY-bMG6Ek5fvA7Ige6SA5o0oS0VZ5y-a0ZF1x2CsSA-YErn1ReZJkbi72Fxguh8wGTTTkhRmBhsFtHUDMWZPXUYfiBKPMg5K0i1tXcycxNnZH7J5GfNXzTs-9x7duCm0NOyw/s1600/unlock.PNG

blogger.googleusercontent.com

https://www.bleepingcomputer.com/download/rem-vbsworm/

bleepingcomputer.com

http://www.analogx.com/contents/download/System/sdefend/Freeware.htm

analogx.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjg56VVe9QCg67OcIisjL3_L5DqK1uSsUZ_mXn8MR-QrsWpIpxm8wA1NpxDfF9kqycUAeqzpddl7UPqbfoKOV1RR84qd1VH_5iHH177goejYcg-8eUel18Rr-WjIMDU40v8ncFycw6yK8hA/s1600/ps1.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFHpx7w53omQBJjKhtXdIcBe0XaioRFYCZt3I_OrQpMiXxWPC_tdjS6On5TFrUo5NapsItDEmm8e0ZeAyHJFGoeXZ1U_X2VdVBzaXXmrdlJ_qa8B3BW2keSj8n0Li1KL3aWLs95GKKY9e4/s1600/ps2.PNG

blogger.googleusercontent.com

http://office.microsoft.com/en-us/help/enable-or-disable-activex-controls-in-office-documents-HA010031067.aspx

office.microsoft.com

http://office.microsoft.com/en-us/help/enable-or-disable-macros-in-office-documents-HA010031071.aspx

office.microsoft.com

http://office.microsoft.com/en-us/excel-help/block-or-unblock-external-content-in-office-documents-HA010065176.aspx

office.microsoft.com

http://bartblaze.blogspot.be/2014/04/ransomware-q.html

bartblaze.blogspot.be

https://otx.alienvault.com/pulse/5645f6274637f2388baeae23/

otx.alienvault.com

http://ss64.com/ps/

ss64.com

https://msdn.microsoft.com/en-us/library/dd909100%28v=office.12%29.aspx

msdn.microsoft.com

https://msdn.microsoft.com/en-us/library/dd911041%28v=office.12%29.aspx

msdn.microsoft.com

https://nakedsecurity.sophos.com/2013/03/05/russian-ransomware-windows-powershell/

nakedsecurity.sophos.com

http://blog.trendmicro.com/trendlabs-security-intelligence/ransomware-now-uses-windows-powershell/

blog.trendmicro.com