Bitcoin ransomware covered by CCTV

[hl5460]

Also there is another similar report on New Beijing Daily

http://8btc.com/thread-18078-1-1.html

[fast2fix]

lol i can't translate those text in the image, is there any text version available? 

[hl5460]

lol i can't translate those text in the image, is there any text version available? 

Try this.

[Amph]

lol i can't translate those text in the image, is there any text version available? 

with google it easy just right click and select translate

so this is the second time this thing happen to a police, but this time with 3M in price and not 300 usd only

are fbi so stupid that they click on the file attached to a malicious email?

[Mt. Gox]

lol i can't translate those text in the image, is there any text version available? 

with google it easy just right click and select translate

so this is the second time this thing happen to a police, but this time with 3M in price and not 300 usd only

are fbi so stupid that they click on the file attached to a malicious email?

Not everyone in the FBI is a security expert/analyst. You probably have a lot of office-type people working there too as well as those who are in administration.

[fast2fix]

lol i can't translate those text in the image, is there any text version available?  

Try this.

thanks that worked!

lol i can't translate those text in the image, is there any text version available?  

with google it easy just right click and select translate

we can't translate text images can we? (unless we speak that language lol)

[tokeweed]

lol i can't translate those text in the image, is there any text version available? 

It say "Welcome to China club.  A ching chang chong chong!"

[ed_teech]

Also there is another similar report on New Beijing Daily

http://8btc.com/thread-18078-1-1.html

Please put the translation in the thread.

[Mt. Gox]

lol i can't translate those text in the image, is there any text version available? 

Try this.

Strange. That link just takes me to a login page in Chinese...

we can't translate text images can we? (unless we speak that language lol)

I don't know if they have OCR programs written for the Chinese language but I did once translate a German book into English by scanning it and processing it through an OCR program before translating it. The results were actually better than I expected although Asian languages don't tend to translate well.

Probably best to wait for someone who understands Chinese to find this thread and chime in.

[SpanishSoldier]

lol i can't translate those text in the image, is there any text version available?  

Try this.

Strange. That link just takes me to a login page in Chinese...

Do not use proxy. Proxies are being re-directed to login. This is the link...

http://weibo.com/3552119670/Cg6HS4D9W

...and here is the translation...

@ CCTV News
[Mo open strange e-mail in English spread! ] New Trojan virus struck, the most vulnerable foreign workers caught! It is spread through corporate and personal mail, e-mail in English, the Trojans were generally means "order" "Product Details" and so on, can be deceptive. Once caught, the computer 114 kinds of file formats will all be the Trojan encrypted and can not be opened. Want to restore a file, the only way is to pay a ransom to the Bitcoin Trojan author. (CCTV reporter Sun Yang)

[Kaneki]

@ CCTV News
[Mo open strange e-mail in English spread! ] New Trojan virus struck, the most vulnerable foreign workers caught! It is spread through corporate and personal mail, e-mail in English, the Trojans were generally means "order" "Product Details" and so on, can be deceptive. Once caught, the computer 114 kinds of file formats will all be the Trojan encrypted and can not be opened. Want to restore a file, the only way is to pay a ransom to the Bitcoin Trojan author. (CCTV reporter Sun Yang)

I think there should be quick action to stop this Trojan virus, that does not spread to the rest of the world.

[louise123]

lol i can't translate those text in the image, is there any text version available?  

Try this.

Strange. That link just takes me to a login page in Chinese...

Do not use proxy. Proxies are being re-directed to login. This is the link...

http://weibo.com/3552119670/Cg6HS4D9W

...and here is the translation...

@ CCTV News
[Mo open strange e-mail in English spread! ] New Trojan virus struck, the most vulnerable foreign workers caught! It is spread through corporate and personal mail, e-mail in English, the Trojans were generally means "order" "Product Details" and so on, can be deceptive. Once caught, the computer 114 kinds of file formats will all be the Trojan encrypted and can not be opened. Want to restore a file, the only way is to pay a ransom to the Bitcoin Trojan author. (CCTV reporter Sun Yang)

So if I understand correctly, a user needs to run this file first?
Which is sent to them via email?

[dadugan]

Many of the ransomware cases were done with insider help. Profit is shared half half with the Russian coder.

[twister]

@ CCTV News
[Mo open strange e-mail in English spread! ] New Trojan virus struck, the most vulnerable foreign workers caught! It is spread through corporate and personal mail, e-mail in English, the Trojans were generally means "order" "Product Details" and so on, can be deceptive. Once caught, the computer 114 kinds of file formats will all be the Trojan encrypted and can not be opened. Want to restore a file, the only way is to pay a ransom to the Bitcoin Trojan author. (CCTV reporter Sun Yang)

I think there should be quick action to stop this Trojan virus, that does not spread to the rest of the world.

Another ransomware case, are antiviruses able to identify it still or not? I think it's designed for windows only right? Or can it spread in Linux and Mac too?

lol i can't translate those text in the image, is there any text version available? 

It say "Welcome to China club.  A ching chang chong chong!"

  Never knew you speak chinese so well.

[Kprawn]

It's going to be difficult to stop Ransomware. Once the Trojan is triggered all files targeted will be encrypted and then you are stuffed.

Without the key, your files are gone...

The only way to reduce the damage, will be to do regular offline backups. If you are hit, you could just restore the files and only lose the files that was not being backed up.

Most office workers do not make backups regularly.    

[MakingMoneyHoney]

It's going to be difficult to stop Ransomware. Once the Trojan is triggered all files targeted will be encrypted and then you are stuffed.

Without the key, your files are gone...

The only way to reduce the damage, will be to do regular offline backups. If you are hit, you could just restore the files and only lose the files that was not being backed up.

Most office workers do not make backups regularly.    

Businesses will probably start forcing backups soon if they haven't already been doing so. If everyone had backups, these ransom hackers would be out of business.

[Amph]

It's going to be difficult to stop Ransomware. Once the Trojan is triggered all files targeted will be encrypted and then you are stuffed.

Without the key, your files are gone...

The only way to reduce the damage, will be to do regular offline backups. If you are hit, you could just restore the files and only lose the files that was not being backed up.

Most office workers do not make backups regularly.    

Businesses will probably start forcing backups soon if they haven't already been doing so. If everyone had backups, these ransom hackers would be out of business.

to be honest backup should be mandatory regardless of virus or other things, what if your hdd fail or other random crap like that? i've always an entire backup of my ssd in a usb pen drive

in this situation the victim could have just restored everything in no time without paying that crazy amount

[MakingMoneyHoney]

It's going to be difficult to stop Ransomware. Once the Trojan is triggered all files targeted will be encrypted and then you are stuffed.

Without the key, your files are gone...

The only way to reduce the damage, will be to do regular offline backups. If you are hit, you could just restore the files and only lose the files that was not being backed up.

Most office workers do not make backups regularly.    

Businesses will probably start forcing backups soon if they haven't already been doing so. If everyone had backups, these ransom hackers would be out of business.

to be honest backup should be mandatory regardless of virus or other things, what if your hdd fail or other random crap like that? i've always an entire backup of my ssd in a usb pen drive

in this situation the victim could have just restored everything in no time without paying that crazy amount

I totally agree.

But way too many people (people probably reading this too) will think "I'll do it tomorrow or another day." But you never know when the computer could crash, could be tonight. Whoops.

[louise123]

Guys, nobody has answered my question so far:

This trojan has to be ran by the victim right?
And it's send through email?

[jbrnt]

Guys, nobody has answered my question so far:

This trojan has to be ran by the victim right?
And it's send through email?

Much viruses and malware need the user of the computer, aka victim, to run an unsuspected file to be infected. Email is only one of the main source of these malwares. Others ways include plugging in a usb flash disks, downloading and viewing a pdf document.