PVChapaev

Swedish news is apparently reporting the country is having som wide attack of ransomware the last couple of days, starting late last week. Standard phishing being the apparent attack vector.

​

Luckily not hit, but I've not been able to figure out exactly what Ransomware is currently active. SE-CERT is no help. :(

​

So are you aware what this might be and what ransomware I would need to look out for?

​

(also very lucky to see you doing an AMA at the same time)

Unsure, its all over the 'normal' media

https://www.di.se/live/omfattande-it-attacker-pagar-mot-flera-svenska-foretag-skrammande/

https://www.dn.se/ekonomi/utpressningsvirus-mot-svenska-storforetag/

https://sverigesradio.se/sida/artikel.aspx?programid=83&artikel=7598006

Unfortunately it seems to be only in Swedish media and I haven't seen any info on the normal technical sites.

Ryuk

Could be, honestly I haven't seen any uptick of that in one of our environments but reports that 'several major companies' have issues makes me kinda concerned since one would think they have enough protection these days.

Like a colleague of mine said: "Falling for a ransomware seems like such a 2017 problem." :D

But I guess users never learn