[BlueOnyx:22183] Re: Jungle_Sec Ransomware

[Ken Hohhof]

Can you expand on "vulnerable websites"?

-----Original Message-----
From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> On Behalf Of Chris
Gebhardt - VIRTBIZ Internet
Sent: Tuesday, June 26, 2018 10:34 PM
To: Blueonyx at mail.blueonyx.it
Subject: [BlueOnyx:22182] Jungle_Sec Ransomware

Just thought I'd post a quick note.  Make sure you've got backups, your
backups are stored off-server, and you are enforcing strong passwords 
and cracking down on vulnerable websites.   We're working with a 
customer that has been infected by the new Jungle_Sec ransomware 
variant.   It's not just Windows machines that are vulnerable anymore.

And if you happen to know of someone expert in these matters (or you,
yourself may be) then hit me up offline.  I don't pretend to have all the
answers and have directed the customer to reach out to someone with
experience in this sort of thing.  We think there are clean backups, but 
it's a roughly 20TB site that got hit.   Yeah... it's big.  (To answer 
the obvious, I've already recommended against paying the .4 bitcoin
ransom.)

-- 
Chris Gebhardt
VIRTBIZ Internet Services
Access, Web Hosting, Colocation, Dedicated
www.virtbiz.com | toll-free (866) 4 VIRTBIZ
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx