News for hackers. Stuff that matters.

A comment on False detection on file tcpip.sys. Parent comment

Re:False detection on file tcpip.sys by voltagex_ on Sunday October 27, 2013 @09:28PM (#6624542)
I was firmly in your camp until recently I saw CryptoLocker - http://www.reddit.com/r/sysadmin/comments/1p32lx/cryptolocke.... This is the first virus in a long time that actually scares me.

I've checked, and current versions of MSE will detect this in time, but it's fast approaching the point where Windows will be running in a snapshotted VM with no network access.

[ Parent | on HN ]
Re:False detection on file tcpip.sys by qoo on Sunday October 27, 2013 @09:39PM (#6624585)
It gets really scary when the ransomeware's makers require their victims to login to some MMORPG and paid in virtual gold.
[ Parent | on HN ]
Re:False detection on file tcpip.sys by yuhong on Monday October 28, 2013 @04:12AM (#6625749)
Well, the attack vector seems to be mostly ZIP email attachments with EXEs.
[ Parent | on HN ]