Heinz09 Posted February 28, 2020 ID:1364874 Share Posted February 28, 2020 One of our servers have recently been hit by ransomware I have not yet seen. I scanned it with mbam, Kaspersky and Symantec. Everything came back clean, I looked at Crypto Sheriff and some tools for ransomware removal from Kaspersky, no success on any of that. Eventually I got hold of Emsisoft and it was able to tell me the files are encrypted with REvil, after reading up I gave up on recovering anything. Besides South Africa, has there been any other occurrences of this recently? So far it seems that it got in via ConnectWise just trying to see who else is affected. Link to post Share on other sites More sharing options...
Porthos Posted February 29, 2020 ID:1365155 Share Posted February 29, 2020 On 2/28/2020 at 6:09 AM, Heinz09 said: So far it seems that it got in via ConnectWise just trying to see who else is affected. https://www.darkreading.com/threat-intelligence/eight-flaws-in-msp-software-highlight-potential-ransomware-vector/d/d-id/1336856 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now