Dharma ransomware of 2016 updated to pose as anti-virus software

A ransomware campaign running successfully threatening organizations globally was recently updated whereby it now enticed victims into loading malicious software that would lock files even as it appeared disguised as an anti-virus program.

The ransomware called Dharma made its debut during 2016 while it carried out several high-profile online attacks. Dharma's perpetrators routinely seek updating their attack forms so as for continuously maintaining them effective while the extortions of ransom payments occur most optimally in return of releasing the keys that would decrypt locked files/networks on Windows computers.

Partner and co-founder Carole Piovesan of Cyber-security Company INQ Data Law says ransomware is a major problem and hackers deploying it normally demand bitcoin in ransom payments. Piovesan recommends modern businesses to first write out and save their existing processes and policies of cyber-security for ensuring there are records of all that they already perform. Subsequently, they should ask an expert to intervene while make sure the strongest policies have been implemented to have an increasingly comprehensive and technically secure cyber preparedness arrangement for data that maybe more sensitive, Piovesan suggests. www.finance.yahoo.com posted this, May 9, 2019.

And as typical of ransomware campaigns there's a phishing e-mail at the beginning of a Dharma attack too. The message asserts as sent from Microsoft telling that there's risk for the victim's computer system running Windows OS and that it's corrupted after there was unusual behaviour on it. Thus, the end-user is urged towards verifying his anti-virus and making it up-to-date via opening one given download link. But upon installation, there appears one ransom note on the victim's screen asking to make a payment with crypto-currency for getting the files unlocked. Intriguingly, though not so much high-profile like the NotPetya and WannaCry assaults of 2017, ransomware continues to threaten organisations because the perpetrators keep on developing and carrying out fresh tactics as well as variants of such software. As ransomware forever evolves its fresh strains keep on confronting businesses with ever new threats.

For countering attacks from Dharma and likewise malware, organisations require keeping their e-mail gateways secured, routinely maintain backups of files while maintain applications and systems up-to-date and patched.

» SPAMfighter News - 5/15/2019