|
This ransomware was predicted a long time ago: The Buddha[^]
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Oldest trick in the book: preying on the stupid.
From: Peypal Manager Personnel <manger@poypil.ru>
... please opening the attachment kindly attached to you.
Duh, OK, looks important, [even though I didn't use paypal before] better open the attachment
It's their own bloody fault! Animals can be trained not to do stuff like that, what's wrong with these people?
I've got zero sympathy for the stupid, absolute zero - even if they are a client.
Sin tack
the any key okay
|
|
|
|
|
Years ago it happened to me that I wanted to open an e-mail directly from the small popup window that appears on top of the windows clock in the taskbar... when I clicked there the popup changed exactly at that moment to the next e-mail message which was spam so I ended clicking on a spam message...
A colleague was in front of the computer at that moment seeing what I was doing and both of us were like...  
Those things happen... Of course since that day I never click on messages directly there.
The problem gets bigger when there are people that need to use computers for their daily work that are not computer experts at all. Then everything can happen... you could have a perfect worker in a workshop that needs to see mechanical drawings and need an e-mail address to talk to some providers or even company customers... If what I explained at the beginning happened to me... imagine what can happen to those people...
The problem here is not the people that use computers.
The problem here is that there are plenty of bad guys/girls out there trying to steal and/or make damage...
It is a lost battle, if you need to be 100% of the time alert, then it is wrong by design...
It's like saying that you should not give directions to tourists during holidays because they can steal, kill or whatever-you-want...
Who knows probably it is what we all should do... 
|
|
|
|
|
Joan M wrote: The problem here is not the people that use computers.
The Algerian princes seem to think otherwise.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
Come on! is there also an Algerian princess? I'm always receiving mails from her brother... 
|
|
|
|
|
I was reading about the latest virus infection in Europe, and the photo showed an ATM terminal having this message. Every once in a while I get it (although it seems that this has stopped since going to Window 10). What's really going on with this message?
Another Global Cyberattack? - The Atlantic[^]
|
|
|
|
|
Or your Hard drive is just dying.
I'd do backups (and test them) just in case
I'd rather be phishing!
|
|
|
|
|
You are joking, right? CHKDSK[^] is part of the OS and tries to repair damage in the file system. I have not yet heard of any malware posing as CHKDSK to do something evil.
And then, of course, there still is Windows 10 that poses as an operating system.
|
|
|
|
|
CodeWraith wrote: I have not yet heard of any malware posing as CHKDSK to do something evil.
that's exactly what this latest malware does.
look at the article the OP linked to. there's a screenshot.
|
|
|
|
|
No. They said that someone reported that their network is down and a screenshot of chkdsk at work. This could just as well been the result of switching the computer on and off without shutting down properly. Nobody really claimed this to be the malware in disguise. To a normal user or journalist this must be all the same anyway.
|
|
|
|
|
|
Thanks. This is ugly, but actually a good disguise for what they want to do.
|
|
|
|
|
... or the system was powered off while running (reset key, power outage).
|
|
|
|
|
Article soon on acquiring an SSL cert using acme.net (forked) to negotiate (along with a micro-HTTP server) an ACME handshake with LetsEncrypt and registering the cert directly with netsh for a single HTTPS domain instance or registering the cert in IIS with SNI to serve multiple HTTPS domains from a single public IP each with their own server instance.
On Windows 10. 
Interestingly, you can have a single netsh binding running with multiple IIS SNI bindings. ![Jig | [Dance]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/jig.gif)
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
Marc Clifton wrote: LetsEncrypt
Why so complicated? Just open the right mail attachment and you get your entire disk encrypted before you know it.
|
|
|
|
|
CodeWraith wrote: Just open the right mail attachment and you get your entire disk encrypted before you know it.
Well, I was wanting something with a bit finer control. 
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
That usually is the problem with all offers that you can't refuse. 
|
|
|
|
|
Marc Clifton wrote: Well, I was wanting something with a bit finer control
But, it's windows 10: users should must not have control, ever!
Sin tack
the any key okay
|
|
|
|
|
Even more interesting, LetsEncrypt has issued certs to over 10,000 PayPal phishing sites and security experts say it is ruining HTTPS as it removes the trustworthiness of https leaving people more vulnerable to attacks.
|
|
|
|
|
F-ES Sitecore wrote: LetsEncrypt has issued certs to over 10,000 PayPal phishing sites and security experts say it is ruining HTTPS as it removes the trustworthiness of https leaving people more vulnerable to attacks.
I looked that up and found this. Quite an interesting read. I'll mention this in the forthcoming article.
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
|
kmoorevs wrote: Perfect timing!
Article here. Not sure though that it'll help you with your webhost. Did they finally resolve the support ticket?
Marc
Latest Article - Create a Dockerized Python Fiddle Web App
Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny
Artificial intelligence is the only remedy for natural stupidity. - CDP1802
|
|
|
|
|
Thanks Marc! My webhost did resolve the ticket. The problem was that they moved my domain to a different server without also installing my certificate...a slight oversight on their part.
"Go forth into the source" - Neal Morse
|
|
|
|
|
|
"She fired from about a foot away with a .50-caliber Desert Eagle handgun"
WTF! A HOUSE wouldnt stop that!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
Perfect timing! A client just brought to my attention the fact that our main website is failing through https. (works fine thru http) I just checked and my SSL cert for that site is not expired...ftp'd in and the cert is still there as it should be. hmmm 
Like I didn't already have enough going on...and it's just started to rain! 
