Critical Info: Ransomware Warning GandCrab v3

Critical Info: Ransomware Warning GandCrab v3

Yeo & Yeo Computer Consulting

IT security experts are warning against a robust form of ransomware called GandCrab v3. Here is what you need to know to stay sharp against this threat:

  • Rather than using only traditional email tactics to steal data, GandCrab gains access through websites and Visual Basic coding. This ransomware leverages PowerShell to execute a file-less attack where PowerShell runs a downloaded script that encrypts the data. In our testing, no file or executable existed in the infection/encryption.
  • Although this tactic is new to the ransomware scene, GandCrab has been highly effective. In the first two months of 2018, hackers infected over 50,000 victims, causing $600,000 in damages.
Am I protected?
If you are subscribed to YC Defense, utilizing Carbon Black, you are protected against GandCrab. As of June 1, Symantec released updates to protect its users against GandCrab. Other solutions such as Trend Micro are still actively working on updates.

Remember to always think before you click. Our team of network engineers are monitoring GandCrab and we will continue to update you as more information develops.
 
As always, we remind you to consider the importance of Security Awareness Training. Your employees are your first line of defense against threats like GandCrab.

Yeo & Yeo Computer Consulting

Yeo & Yeo Computer Consulting

Yeo & Yeo Computer Consulting was formed in 1984 as an affiliate of Yeo & Yeo CPAs & Business Consultants. The company has grown to more than 40 employees who serve clients in various industries. Our clients include small and mid-size businesses, Fortune 1000 companies, schools, health care facilities, local, state and federal agencies, and nonprofit organizations throughout Michigan.

Connect with Yeo & Yeo Computer Consulting