4/22/16 Weekly News: Mac Ransomware Defense, Building Security Inadequate, and New Ransomware

This week was especially busy, and it resulted in delays in the Astria Horizon news posts, but certainly not for lack of interesting news. This week Ransomware is once again a prime topic, including preventative measures for Mac OS X users and the development of a new form of infection, as well as how the Internet of Things can effect a building's security.

1. CSO Online, "This tool can block Ransomware on Mac OS X, for now."

There is good news for Mac users: security researchers have developed a free tool that detects and blocks Ransomware from infecting systems running OS X. The tool, named, "RansomWhere?" is able to detect and suspend any encryption process on Mac OS X systems, and prompts the user to either allow or stop the encryption from taking place. This however does mean that it will not work on systems that are already infected with Ransomware, it is only a preventative measure.

Mac users have been increasingly targeted by Ransomware since the development of KeRanger last month, so the ability to suspend and stop the encryption process that Ransomware starts is very helpful. But the developers mention it is currently only effective against known Ransomware variants, and may not be able to block attacks developed in the future.

2. We Live Security, "Buildings at risk of cyberattacks."

Last week we discussed the Internet of Things (IoT), and in particular looked at a case where malware came pre-installed on IoT security cameras. This week, ESET's blog, We Live Security, covered how such threats can impact the security of not only information, but even directly upon buildings. Specifically they mention white-hat hackers that were able to break in to the building management system of a prominent tech company in Sydney, Australia.

ESET warns that although this was a test, it is important to properly prepare your business for cyber-attacks on the building as well. Often times security systems are installed with just their default passwords in place, and these are easily found in PDF owners manuals. Systems that secure your building electronically, such as security cameras and electronic door locks, need to be properly secured and updated regularly to be effective in keeping your building safe, or they may actually hinder the security of the building you're trying to protect.

3. Security Week, "CryptXXX Ransomware Steals Bitcoin, Private Data."

Another instance of Ransomware in the past week includes the development of a new form, dubbed "CryptXXX." Security Week reported on this new attack after it was observed by Proofpoint in a recent campaign. The Ransomware behaves as most do, encrypting a user's files and demanding a ransom of around $500 to decrypt the files to be useful again.

What makes this Ransomware different is that it also steals information from the user as well as any Bitcoins on the infected system. So if these infections are targeted towards hospitals as they have been in recent months, they could aim to both collect a ransom as well as stealing private information of patients or staff. Hopefully researchers will find better preventative measures for infections such as these in the future.


That’s all for this week, check back next Tuesday for further news from across the web, all here at Astria Horizon. If you want more information on how Astria Business Solutions can assist you in your Information Security goals, visit our website at AstriaBiz.com