Author Topic: CryptoLocker - Ransomware, hardcore as stuff.  (Read 2514 times)

yielding a combined 524288 bit encryption which is unheard of, and nothing even the NSA, or even every PC on the planet working together, could hope to crack in a century

A 2048-bit RSA key is equivalent to a 118 bit symmetric encryption key. While this is still out of reach at the moment (as it would still take ~1000 universe ages if you had a modern supercomputer) it is still theoretically possible to break.
Wouldn't you need to know the exact contents of a file to even have a chance of cracking it?

This thing doesn't auto run from what i've seen/read about it. So couldn't someone download it, crack the exe and find out where the money is being sent to etc etc? I'm a dumbstuff towards exe's but one thing for sure is that I know you can open them. I'm assuming that you'd have to unencrypt the exe. (They wouldn't be that dumb to make the exe not encrypted in hex?)

Just assuming this, so don't bash me if it's not possible.

This thing doesn't auto run from what i've seen/read about it. So couldn't someone download it, crack the exe and find out where the money is being sent to etc etc? I'm a dumbstuff towards exe's but one thing for sure is that I know you can open them. I'm assuming that you'd have to unencrypt the exe. (They wouldn't be that dumb to make the exe not encrypted in hex?)

Just assuming this, so don't bash me if it's not possible.

they're using bitcoin and moneypak so good luck tracing where the money goes. also moneypak is smart because you can't chargeback unlike paypal.

they're using bitcoin and moneypak so good luck tracing where the money goes. also moneypak is smart because you can't chargeback unlike paypal.
yeah, both revenue streams are used by both domestic arms dealers and drug dealers for their....advantages.

Though doesn't bitcoin release the info of the buyer/seller for public eye to see?
Also you won't need to worry because if you have a good anti virus it'll block it. (Avast and Malwarebytes does not detect this virus, Some Pho program blocks it good. Almost certain Microsoft security essentials does)
« Last Edit: October 24, 2013, 07:04:31 AM by Starzy »

Though doesn't bitcoin release the info of the buyer/seller for public eye to see?
I don't really know the technicalities of the bitcoin network, but since people use the service to launder money I doubt it.

This is scary, be right back backing up. Havn't done it in a while.
BACKING UP
BACKING UP
BACKING UP

Wouldn't you need to know the exact contents of a file to even have a chance of cracking it?
No? Encryption doesn't work like that.

I'm backing my stuff up onto my 16GB flash drive

Then I'm hiding the flash drive in an underground bunker

I'm backing my stuff up onto my 16GB flash drive

Then I'm hiding the flash drive in an underground bunker
where do you hide the key for the bunker

Block any and all .exe files from running from %AppData% with Group Policy Editor and you should be completely safe. Then just whitelist legitimate .exe files as needed.

http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information#prevent

Scroll down a hair to "How to manually create Software Restriction Policies to block CryptoLocker."
« Last Edit: October 24, 2013, 01:33:23 PM by dkamm65 »

Block any and all .exe files from running from %AppData% with Group Policy Editor and you should be completely safe. Then just whitelist legitimate .exe files as needed.

http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information#prevent

Scroll down a hair to "How to manually create Software Restriction Policies to block CryptoLocker."

did this last night

this will also probably block some other malware your av can't get

Also can't you just create an automatic system restore for like every 2-3 day cycle. And if you get it then remove it. Afterwards system restore to recent copy and bam.