Cryptolocker malware: Beware fake email attachments

[Michael Browne]

The National Fraud Intelligence Bureau (NFIB) is continuing to receive reports relating to Cryptolocker, a destructive malware that installs itself on your computer and holds your files to ransom by encrypting them

 

Cryptolocker surfaced in late 2013 and targets computers running Windows operating systems.

 

It disguises itself as an attachment to an e-mail appearing to have been sent by legitimate company,

 

These are typically courier firms claiming a failed delivery, airlines with flight tickets, Skype notifying a missed voicemail, banks and financial institutions.

 

It catches out victims who think they are opening a PDF or image file.

 

Do not open the attachment, just delete the email.

 

http://www.actionfraud.police.uk/cryptoLocker-alert-update-dec13

 

http://www.pcadvisor.co.uk/features/security/3491195/how-protect-yourself-from-cryptolocker-attack/

 

http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information

[unclebulgaria67]

There was such an email the other day from Amazon about some order that has never been placed with them. Also another email from Apple about my account being suspended. Both fake emails.

 

Both deleted straightaway.

 

The problem is that many people will at this time of year believe that the emails are genuine and they will open the attachments.

[renegadeimp]

Stupid is as stupid does.

[dx100uk]

install the little prog that stops this policy happening

 

the link is on the site already listed

 

dx

[dx100uk]

two fool-proof tips

 

NEVER EVER browse the internet using a windows user that has ADMINSTRATION RIGHTS.

 

NEVER EVER download any email attachments that have the .ZIP extension

 

dx

[jas88]

Cryptolocker seems a particularly nasty case: most malware you can simply delete once you - or your AV software - know where it hides, but this one seems to use genuinely secure encryption to take your data hostage. Alarmingly professional work.

 

The PCAdvisor article is off in dating the technique to 2004: I recall a DOS virus years before that which used basic encryption, but that was easily remedied thanks to that weak encryption.

[renegadeimp]

Easy way to deal with it. make regular backups onto DVD or external USB. If you get this malware. Throw in your windows DVD, wipe it and restart.