Skip to main content

Hackers spreading Locky ransomware by uploading infected .SVG images on Facebook Messenger

What is Locky Ransomware ?

The name of this ransomware is LOCKY. What is Locky ? it actually denotes one of the today’s prevalent ransomware families. It was discovered in the mid-February 2016. This file-encrypting epidemic proved to be sophisticated enough to fly under the radar of conventional anti-malware defense. However, Locky is one of the most preferred malicious software used by hackers. 

Who Discovered ?

Bart Blaze, a very well known reputed security researcher first discovered this type of ransomware attack which is being conducted via Facebook Messenger. Later, Peter Kurse, another security researcher with extensive experience in investigating cyber-crimes confirmed the news to reporters.
Bart Blaze wrote in his personal blog :
 “As always, be wary when someone sends you just an ‘image’ – especially when it is not how he or she would usually behave”. 
And Facebook has released the following statement in response to the discovery:
 “We maintain a number of automated systems to help stop harmful links and files from appearing on Facebook, and we are already blocking these ones from our platform. In our investigation, we determined that these were not, in fact, installing Locky malware—rather, they were associated with Chrome extensions. We have reported the bad browser extensions to the appropriate parties”. 

How does it spread ?

To spread Locky ransomware hackers are using a downloader software called Nemucod. This downloader is being used by hackers to help the ransomware bypass Facebook security by pretending to be a .svg image file. Hackers is now delivering this downloader software Nemucod through Facebook Messenger. 
What is .svg image file ? How hackers spread ransomware through it ? SVG extension file is scalable vector graphics file. It’s based on XML (Extensible Markup Language). So, it’s very easy to implement a set of codes of any harmful programs in it.
However, in this case hackers has embedded JavaScript. When you access this infected vector image file (SVG) then this java-script directs you to a site that seems to be YouTube’s landing page. But, actually it is not real Youtube’s homepage. It’s a clone site developed by hackers. If you look in the url then you will find that it’s 100% different.
However, after loading the fishing site you’ll be requested to download & install a codec so that the desired video could be played. This codec is presented in Chrome extension. If you install this codec chrome extension then the attack shall be distributed to other friends of you via Facebook Messenger. And at the same time this chrome extension will install Nemucod downloader, and instantly Locky will be installed into your system via Nemucod downloader. After that your all personal files on PC will be encrypted (locked) by Locky & it’ll demand some money via Bitcoin to decrypt them.

How to keep safe yourself from Locky ransomware infections?

To protect yourself from Locky take some preventive precautions to avoid any trouble in the future.  Following these rules strictly may decrease the chances of hijacking by Locky -
1. Do not connect your pc, laptop, tablet etc. to a public WiFi hot spot.
2. Do not open any attachments in email or chatbox from unknown or, suspicious senders.
3. Do not click any links in emails or chats from unknown senders.
4. Do not download any files attached in email or chat from unknown or, suspicious senders.
5. Try to avoid visiting malicious sites.
6. Do not download or, update software/apps from a third-party website, or store.
7. Do not use any out-dated or, pirated software.
8. Install WOT (web of trust) extension, and visit only reputed websites shows by WOT.
9. Keep your antivirus & windows up to date always.
10. You may use Kaspersky anti-ransomware tool, or, Bitdefender anti-ransomware tool for extra security.
11. Disable SMB v1, SMB v2, SMB v3 on windows via registry editing. How to disable it ? Read below.
12. Periodically set restore point. After attack you may able to use System Restore to get back to a known-clean state.13. Most Important : Always keep offline backup your data, or, do cloud backups.  

references : 

Tags : Hacks, Security, Ransomware, Malware, Facebook, News, Cyber Attack, Cyber Crime, 

This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 







Comments

Popular Posts (Last 7 Days)

One Black & White Photograph Daily for 30 days - Day #30

In front of a park, a jackfruit tree & a row of palm trees Camera : Nokia Model : N78 Location : Kolkata, West Bengal, India Snap Taken : 25 May 2009 Tags : Black & White Photography, Flowers & Plants photography, Landscape photography, Nature, Photography,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

What I Learnt Today : 10 Unknown Amazing Facts About Animals - Part CXXXIII

  image credit (1) Japanese Macaques make snowballs for fun. (2) The chevrotain is an animal that looks like a tiny deer with fangs. (3) Turritopsis nutricula Immortal jellyfish is the only species known to live forever. (4) One million stray dogs and 500,000 stray cats live in New York City metropolitan area. Turritopsis nutricula Immortal jellyfish   image credit (5) Nine-banded armadillos always give birth to identical quadruplets. (6) The flying frog uses flaps of skin between its toes to glide. (7) It takes a sloth two weeks to digest its food.   Nine-banded armadillo   flying frogs   image credit (8) A narwhal tusk is actually an exaggerated front left tooth, and unlike most teeth, it's soft and sensitive on the outside with a tough interior. (9) Humpback whales create the loudest sound of any living creature. (10) The slowest mammal on earth is the tree sloth. It only moves at a speed of 6 feet (1.83 meters) per minute. slot...

One Black & White Photograph Daily for 30 days - Day #25

green yard - behind of my village home Camera : Xiaomi Model : 2014818 Location : Bongaon, West Bengal, India Snap Taken : 14 March 2016 Tags : Black & White Photography, Flowers & Plants photography, Landscape photography, Nature, Photography,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

Top 10 Bitcoin Price Predictions for 2018 to 2022

image credit Although many Bitcoin price analyzer says "Bitcoin price is truly unpredictable", but, there are always some price specialists who love to make their own price predictions in various ways. Here are top 10 Bitcoin price predictions for 2018 to 2022 : 10. $20,000 By December 2018 :: Predicted by Pantera Capital's 9. $25,000 By December 2018 :: Predicted by Fundstrat Global Advisors  8. $28,000 By  April 2018 :: Max Keiser 7. $35,000 – $60,000 By Next Block Reward Halving (   ETA date:   30 May 2020   ) :: Alistair Milne 6. $50,000 By December 2018 :: Anthony Pompliano 5. $75,000 By December 2018 :: John Pfeffer 4. $100,000 By December 2018 :: Kay Van-Petersen 3. $250,000 By 2022 :: Brian Kelly 2. $250,000+ By December 2022 :: Tim Draper 1. $1,000,000 By December 2020 :: John McAfee Source :  bitcoinist Tags : Bitcoin, Cryptocurrency, Crypto Markets, Money, Economics, News,  This Post Was Published...

photographs of very rare creatures "Gharial (Gavial)" [my 100% original work]

Today I share two photographs of very rare creature  Gharial  or,  Gavial . They are one kind of reptile. And they are also known as " fish-eating crocodile ". They are normally found in the northern India. The global wild gharial population is estimated at fewer than 235 individuals, which are threatened by loss of riverine habitat, depletion of fish resources, and entanglement in fishing nets. As the population has declined drastically in the past 70 years, the gharial is listed as  Critically Endangered  on the  IUCN Red List   (source wikipedia) . Read more about Gharial in  Wikipedia .  The gharial is one of the longest of all living crocodilians, measuring up to 6.25 m (20.5 ft), though it should be noted that this is an extreme upper limit, as the average adult gharial is only 3.5 to 4.5 m (11 to 15 ft) in size.With 110 sharp, interdigitated teeth in its long, thin snout, it is well adapted to catchin...

What I Learnt Today : 10 Unknown Amazing Facts About Animals - Part XLV

image credit (1) The largest bat colony in the world in Bracken Cave, Texas. There exists approximately 20 million bats. (2) Tigers not only have stripes on their fur, they also have them on their skin. No two tigers ever have the same stripes. (3) Seahorse dads carry fertilized eggs in their pouch and can give birth to hundreds of babies at a time. (4) George Washington’s teeth were made of elephant ivory, and walrus tusks. Tigers have also stripes on their fur   image credit (5) It’s really unbelievable that moths have no stomach. They digest their food in entrails. (6) A python can swallow a rabbit whole and may eat as many as 150 mice in a six-month period. (7) Butterflies can taste with their feet. A python swallows a rabit   image credit (8) Around 50 percent of orangutans have fractured bones, due to falling out of trees on a regular basis. (9) It’s hard to believe that cats dream in the sleep like humans. (10) Trained Dogs can detect canc...

Visiting deep inside the Sundarbans & spent days with Bawali - Episode #01

In the last October I visited Sundarbans, the world's one of the largest mangrove forest. It was also declared as world heritage site by UNESCO in 1997. In this forest a numerous wildlife species exist - birds, reptiles, fishes, amphibians and also the king of the forest "Royal Bengal Tiger". The ganges dolphins & crocodiles are also living in the canals of Sundarbans. Chital is a one kind of striped deer living in this forest. The rural life in the area of this coastal forest is also very attractive. They basically maintain their lives by collecting honey, woods and fishes In the native language they are called as Bawali. I spent 2 days with them. Here I share some of my tour photographs of Sundarbans and Bawali -- I captured these two photographs inside the home of a Bawali family, In a village of Sundarbans Camera : SONY Model : DSC-W710 Location : Sundarbans, West Bengal, India Snap Taken : 30 Oct 2017 To Be Continued... Tags : Photography, Life, I...

What I Learnt Today : 10 Unknown Amazing Facts About Animals - Part CXXIV

image credit (1) Mantis shrimp have four times as many color receptors in their eyes as humans do. (2) Are you a sleepy guy ? You will be astonished to hear that ferrets sleep around 20 hours a day. (3) Infant Pygmy Marmosets babble to develop their language skills, similarly to the way human babies babble. (4) At birth, a panda is smaller than a mouse and weighs about four ounces. ferret   image credit (5) Two-toed sloths cannot shiver to stay warm like other mammals due to their low metabolic rates and little muscle tissue. (6) Though butterflies have various colors on their bodies. They can only see the colors red, green and yellow. (7) Bumblebees have hair on their eyes.   Infant Pygmy Marmoset Baby Panda at birth   image credit (8) Slow loris may be cute, but it’s the only venomous primate in the world. When it raises its arms, it’s performing a defensive stance, and preparing a venom. (9) The Chameleon can focus its eyes seperately to watc...

A free open source data encryption program for steemit users

A free open source data encryption program for steemit users Hello, everyone this is my first software sharing for Steemit Community. I developed a software (programmed in Visual Basic 8) for encrypting any text data. It’ll play a vital role on Steemit Community, because, on Steemit Platform we need a very long passphrase to be saved. It’s impossible to memorize this passphrase. And, it’s also very dangerous to write down this passphrase in the notepad. There are too many free password keepers & encryption programs, but, maximum are not open-source. My main objective is to provide such type open-source program. I use  AES Rijndael Block Cipher Encryption Algorithm  to encrypt text data. Step by Step Development : Open a new project in Visual Basic 8. Select “Standard EXE”. Create two text boxes & two command buttons on the form. Text1 textbox, Text2 textbox, Command1 commandbutton & Command2 commandbutton. Change the caption of the command b...

A free open source data encryption program for steemit users [repost]

A free open source data encryption program for steemit users Hello, everyone this is my first software sharing for Steemit Community. I developed a software (programmed in Visual Basic 8) for encrypting any text data. It’ll play a vital role on Steemit Community, because, on Steemit Platform we need a very long passphrase to be saved. It’s impossible to memorize this passphrase. And, it’s also very dangerous to write down this passphrase in the notepad. There are too many free password keepers & encryption programs, but, maximum are not open-source. My main objective is to provide such type open-source program. I use  AES Rijndael Block Cipher Encryption Algorithm  to encrypt text data. Step by Step Development : Open a new project in Visual Basic 8. Select “Standard EXE”.   Create two text boxes & two command buttons on the form. Text1 textbox, Text2 textbox, Command1 commandbutton & Command2 commandbutton.    Chan...
Back to Top