Story image

CryptoWall nets US$325 million; Is your business secure?

03 Nov 2015

A single cybercrime group may be collecting all the revenue from CryptoWall 3 according to a new report from the Cyber Threat Alliance, which has issued its recommendations to businesses on how to keep secure.

The Cyber Threat Alliance is an industry group whose co-founders include Fortinet, Intel Security, Palo Alto Networks and Symantec.

Their report, Lucrative Ransomware Attacks: Analysis of the CryptoWall Version 3 Threat, says more than US$325 million was gained from CryptoWall 3, which appeared earlier this year, including ransoms paid by victims to decrypt and access their files.

The report says 406,887 attempted CryptoWall infections were recorded, with the hundreds of millions of dollars damage wrought by the ransomware spanning hundreds of thousands of victims across the globe.

Earlier this week, virtual private network and managed services provider BCT reported that an increasing number of Australian companies have fallen victim to the new strain of Cryptolocker in recent months.

The Cyber Threat Alliance says there are steps organisations can take to lessen their risk of falling victim to CryptoWall v3 and other forms of advanced malware.

It recommends:

- Ensuring your operating systems, applications and firmware are updated with the latest versions of the software.

- Understanding typical phishing techniques and how to thwart them, such as by not opening email from unknown email addresses or attachments of certain file types. 

- Keeping web browsers updated, and turning on settings to disable browser plugins, such as Java, Flash and Silverlight, preventing them from running automatically. 

- Reviewing access and security policies within corporate networks to limit access to critical infrastructure from systems and users who don’t need it.

Joe Chen, Symantec vice president of engineering, says the Cyber Threat Alliance’s first major target is ransomware threats like CryptoWall which are growing at an alarming rate and holding critical business and consumer data hostage.

Derek Manky, Fortinet global security strategist, says the explosion of connected devices and our reliance on digital platforms has created an environment that is both empowering and creating new ways for adversaries to penetrate networks.

“Managing this risk is a shared responsibility,” Manky says. “We need to step forward and not wait for the adversary to make the move first.

“When we grow our collective intelligence across all sectors, we can better combat advanced threats, deploy security controls to counteract the latest moves and deliver greater security for our customers and all organisations.”

Unencrypted Gearbest database leaves over 1.5mil shoppers’ records exposed
Depending on the countries and information requirements, the data could give hackers access to online government portals, banking apps, and health insurance records.
Mozilla launches Firefox Send, an encrypted file transfer service
Mozille Firefox has launched a free encrypted file transfer service that allows people to securely share files from any web browser – not just Firefox.
VoiP new-comer upgraded and ready to take on NZ
UFONE is an Auckland-based VoIP provider that has just completed a massive upgrade of its back-end and is ready to take on the market.
Online attackers abusing Kiwis' generosity in wake of Chch tragedy
It doesn’t take some people long to abuse people’s kindness and generosity in a time of mourning.
Apple launches revamped iPad Air & iPad mini
Apple loves tinkering with its existing product lines and coming up with new ways to make things more powerful – and both the iPad Air and iPad mini seem to be no exception.
IntegrationWorks continues expansion with new Brisbane office
The company’s new office space at the Riverside Centre overlooks the Brisbane River and Storey Bridge.
Emerging tech helps savvy SMB’s succeed
A CompTIA report shows SMBs are taking on the challenge of emerging technologies to reach their business goals.
Tech community rocked by deaths of Atta Elayyan and Syed Jahandad Ali
Both men were among the 50 killed in the shooting in Christchurch last Friday when a gunman opened fire at two mosques.