Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<strong><keyword id="6358777" type="General" weightage="50" keywordseo="new-delhi" source="Orion">New Delhi</keyword>: </strong>A new <keyword id="6362094" type="General" weightage="50" keywordseo="ransomware" source="Orion">ransomware</keyword> has been detected in <keyword id="3658" type="General" weightage="50" keywordseo="india" source="Orion">India</keyword> that makes victims donate new clothes to homeless, feed kids in branded <keyword id="14000718" type="General" weightage="20" keywordseo="pizza-outlets" source="Orion">pizza outlets</keyword> and provide financial help to anyone who needs urgent medical attention but cannot afford it, according to digital risk monitoring firm <keyword id="6269615" type="General" weightage="20" keywordseo="Cloudsek" source="Orion">Cloudsek</keyword>. The company warned that the <keyword id="14000719" type="General" weightage="100" keywordseo="Goodwill-ransomware" source="Orion">Goodwill ransomware</keyword> could also result in temporary, and possibly permanent, loss of company data and a possible shutdown of the company's operations and accompanied revenue loss. <br /><br />"<keyword id="74117" type="General" weightage="100" keywordseo="goodwill" source="Orion">GoodWill</keyword> ransomware was identified by <keyword id="14000720" type="General" weightage="20" keywordseo="CloudSEK-researchers" source="Orion">CloudSEK researchers</keyword> in March 2022. As the threat group's name suggests, the operators are allegedly interested in promoting social justice rather than conventional financial reasons," <keyword id="14004512" type="General" weightage="50" keywordseo="clousek" source="Orion">Clousek</keyword> said in a report. <br /><br />Once infected, the GoodWill ransomware worm encrypts documents, photos, videos, database, and other important files and renders them inaccessible without the decryption key. <br /><br />"The actors suggest that victims perform three socially driven activities in exchange for the decryption key- donate new clothes to the homeless, record the action, and post it on social media, take five less fortunate children to Dominos Pizza Hut or KFC for a treat, take pictures and videos, and post them on social media and provide financial assistance to anyone who needs urgent medical attention but cannot afford it, at a nearby hospital, record audio, and share it with the operators," the report said. <br /><br />Once all three activities are completed, the ransomware asks victims to write a note on social media (Facebook or Instagram) on "how you transformed yourself into a kind human being by becoming a victim of a ransomware called GoodWill." <br /><br />Upon completing all three activities, the ransomware operators verify the media files shared by the victim and their posts on social media. <br /><br />The actor will then share the complete decryption kit which includes the main decryption tool, password file and a video tutorial on how to recover all important files, the report said. <br /><br />"Our researchers were able to trace the email address, provided by the ransomware group, back to an India-based IT security solutions &amp; services company, that provides end-to-end managed security services," the report said.<br /><br />SEE ALSO:<br /><a target="_blank" class="c-link c-message_attachment__title_link" href="https://www.businessinsider.in/tech/news/elon-musk-replies-to-pune-techies-witty-tweet-says-he-does-not-run-the-techies-account/articleshow/91735503.cms">Elon Musk replies to Pune techie's witty tweet, says he does not run the techie's account</a><br /><a target="_blank" class="c-link c-message_attachment__title_link" href="https://www.businessinsider.in/business/news/billionaire-wealth-rose-more-in-2-years-than-in-the-last-23-years-combined/articleshow/91734674.cms">Billionaire wealth rose more in 2 years than in the last 23 years combined</a>

GoodWill ransomware detected in India makes victim donate to poor, provides financial help to needy patients

<ul class="summary-list"><li>Last year, businesses and government agencies experienced a spike in cyberattacks. </li><li><keyword id="11903597" type="UNKNOWN" weightage="60" keywordseo="security" source="Orion">Security</keyword> technology has advanced, but cybercriminals still exploit a big weakness: people.</li><li>Two experts tell Insider how organizations can educate the workforce and protect against attacks.</li><li>The conversation was part of Insider's virtual event "<keyword id="6361948" type="UNKNOWN" weightage="60" keywordseo="cybersecurity" source="Orion">Cybersecurity</keyword> Trends: Prepare For A More Secure Future," presented by Cisco, which took place on Thursday, May 12, 2022.</li></ul><p>2021 was a good year for cybercriminals.</p><p>A record 66% of organizations were hit by ransomware attacks in 2021, up 78% from 2020, according to a <a href="https://assets.sophos.com/X24WTUEQ/at/4zpw59pnkpxxnhfhgj9bxgj9/sophos-state-of-ransomware-2022-wp.pdf">report by tech security firm Sophos.</a> Criminals holding computer systems hostage via ransomware can lead to loss of data and reputational harm. </p><p>Despite innovations in security, this paints a grim picture for private companies and government organizations.</p><p>Unknowing employees remain the weakest link and easiest target for cybercriminals, according to Steven Hernandez, chief information security officer at the US Department of Education, who spoke at the cybersecurity panel on Thursday called "<a href="https://youtu.be/Bfwd80Vpim4">Cybersecurity Trends: Prepare For A More Secure Future,</a>" presented by Cisco. The solution isn't simply to add more training to help skill up employees on security practices, but to build a culture of awareness rooted in creativity, sensitivity, and engagement, he said.</p><p>"Frankly, the human has become the softest, easiest target in the equation for our attacker to go after," Hernandez said.</p><p>Creating a culture of awareness means having more honest and open conversations with staff that keep them on alert. Prevention starts with employee education and the best person to spearhead that effort is someone who's excited about the cause, Jon Brickey, senior VP at Mastercard, said at the panel.</p><p>"You really need to identify somebody who's creative and engaging and likes to do this kind of thing," Brickey said. "You have to make it engaging."</p><p>This can take many different forms, like leading efforts on creating speaker series on cybersecurity and presenting on types of threat, according to Brickey. At Mastercard, the security department created online escape rooms and modules presented in virtual reality to encourage robust year-round engagement.</p><p>When deciding how to keep employees engaged, the cybersecurity department can get inspiration from reality. The Department of Education recycles and repackages actual attacks in hopes of educating staff on what cybercriminal attempts look like, Hernandez said.</p><p>But employee engagement has its limits. By impersonating cybercriminals and recreating their attempts to deceive employees into giving up personal information, known as <keyword id="12224442" type="UNKNOWN" weightage="60" keywordseo="phishing" source="Orion">phishing</keyword>, organizations can run the risk of alienating or frustrating their employees, according to Hernandez.</p><p>Recreating some of the schemes that play on employees' emotions, like pretending to be a family member, can cause employees to disengage altogether. That could set back a cybersecurity program by weeks or months, Hernandez said.</p><p>Cybersecurity leadership should also be respectful around the timing of the trainings and evaluations to be sure it doesn't coincide with performance reviews or annual bonuses, according to Brickey.</p><p>"We don't want to create friction where it's not needed," Brickey said.</p><p>Communicating with leadership across the organization can help gauge how employees will respond to the tests, according to Hernandez. And employees should have the capability to test out certain modules to build goodwill and confidence among the workforce, he said.</p><p>Removing barriers to cyber secure behavior is also important for the security department to prioritize, Hernandez said. For example, the Department of Education built a tool into its email server that allows staff to submit a suspicious email directly to the security team to remove any obstacles to reporting.</p><p>Hernandez also urges building positive relationships between security departments and employees by calling employees and recognizing them when they've done well in training.</p><p>But critically, companies need to realize that there isn't a one-size-fits-all approach to working with employees to better educate them. Threat actors vary depending on the business and industry, according to Hernandez.</p><p>"There will always be a human element to this," Hernandez said. "As long as there's a human in the mix, they can always be targeted."</p>

How businesses can use escape rooms, phishing tests, and other creative tactics to fend off common cyberattacks, according to experts from Mastercard and the US government

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><p class="source"><span>Joe Raedle/Getty Images</span></p></div><p></p></div></div>The digital criminal underground can be  intensely competitive. Cyber-criminals are constantly finding new ways to extort money or information from their unsuspecting victims and crafting new software to stay ahead of the curve.</p><p>Now that hackers are creating viruses <a href="http://www.businessinsider.com/ransomware-as-a-service-is-the-next-big-cyber-crime-2015-12">so user-friendly that they can be deployed by anyone with a little cyber know-how</a>, they are competing with each other for the business of the low-level criminals that use their services.</p><p>Hackers are offering customer service and support, guarantees, and custom features to attract criminal customers and differentiate themselves from their competitors.</p><p>"[Cyber-criminals] have a very crowded market and they are competing with themselves." Ed Cabrera, Vice President of Cybersecurity Strategy at Trend Micro, told Business Insider.</p><p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><p class="source"><span>Verified Carder/Screengrab</span></p><p class="caption">A carder claims that all of his cards are verified and guaranteed to work.</p></div><p></p></div></div>According to Cabrera, Trend Micro is now seeing customer support functionality in nearly all cyber-criminal undergrounds the company researches.</p><p>Support and service are particularly important to sellers whose market is comprised of relatively inexperienced hackers who may need some degree of hand-holding.</p><h2>Carders went first</h2><p>Some of the first cyber-criminals to adopt this line of thinking were "carders:" those who sell stolen credit card info. After the shutdown of <a href="http://www.wired.com/2013/07/bulgarian-shadowcrew-arrest/">several</a> major carding <a href="http://arstechnica.com/uncategorized/2004/10/4359-2/">operations</a> and forums in the early 2000s, market forces kicked in as new upstarts sought to differentiate themselves. Soon enough, carders were frequently verifying cards with <a href="http://www.ecommercetimes.com/story/58227.html">test donations to charities</a> and even offering <a href="http://krebsonsecurity.com/2014/06/peek-inside-a-professional-carding-shop/">money-back guarantees</a> to their customers.</p><p>The idea has since caught on.</p><p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><p class="source"><span><a href="http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-follow-the-data.pdf">Trend Micro</a></span></p><p class="caption">Cybercriminals advertise an "80%+ working guarantee" on purchases of credit cards, PayPal and eBay accounts.</p></div><p></p></div></div>"You name the service or product and you have high specialization [in that market]," Cabrera said. "Customer service is just a natural effect of that."</p><p>Brian Krebs, a journalist who has written extensively on cybercrime, echoed Cabrera's statements in an email to Business Insider.</p><p>"Those who profit are the ones who manage to develop strong customer service models," wrote Krebs. "Those who screw this up - whether they're renting some kind of malware as a service setup or rolling their own - are not going to be successful in the long term."</p><p>Virus developers often seem to offer perks out of a sense of hacker camaraderie and general goodwill toward their customers, if not their victims.</p><p>Often, hackers deploying a virus will share tips with others doing the same or offer suggestions to the original author on how to improve the service.</p><p>Jeiphoos, <a href="http://www.businessinsider.com/ransomware-as-a-service-is-the-next-big-cyber-crime-2015-12">the developer of ransomware service Encryptor RaaS</a>, told Business Insider that he has received a few dozen comments and had conversations with multiple people interested in his service.</p><p><div class="KonaFilter image-container display-table"><div><div class="image on-image"><p class="source"><span>Encryptor RaaS/Screengrab</span></p><p class="caption">A feedback form on Encryptor RaaS, a ransomware service by Jeiphoos.</p></div><p></p></div></div></p><p>In addition to asking questions about his service, users have given Jeiphoos feature requests, requests for custom webpage templates or ransom notes, and inquiries about virus detection. Some write just to say thank you. He responds to them when they leave him an address to reach them at and even posts on forum threads discussing his software, seeking out improvements and verifying his identity to establish trust.</p><p>Jeiphoos said that he occasionally implements features recommended by customers looking to improve the service or tweak the software for a given user's needs, like providing a white-label version with no Encryptor branding.</p><p><div class="KonaFilter image-container float_right"><div class="image on-image"><p class="source"><span>Onion Dir/Screengrab</span></p><p class="caption">Positive reviews of Encryptor RaaS, some claiming to have made money, despite the fact that no ransoms had ever been paid through the service when the reviews were written.</p></div><p></p></div>But Encryptor is free for anyone to use and Jeiphoos doesn't make a cent unless the ransom is paid, in which case he gets a cut. Asked why he provides free support to his "customers" before they've earned him any money, Jeiphoos compared himself to an employee in an ordinary store helping potential shoppers.</p><p>"Others have called me [selfless] in my 'non-criminal' side of life," Jeiphoos said. "I almost plead [with] them to stop saying that."</p><p>Retired <a href="http://www.businessinsider.com/tox-lets-novices-build-ransomware-in-three-steps-2015-5">ransomware as a service developer Tox</a> told Business Insider over encrypted chat how the users of his malware helped him find bugs, test the malware's viability on different operating systems, and make improvements.</p><p>As his service became popular, a community evolved in a chatroom on malware's website.</p><p>"At the beginning I had to answer questions and help users, but after a few days my users were helping each other and I just had to answer to private messages," <a href="http://www.vocativ.com/tech/hacking/ransomware-hacker-tox-reveals-who-his-targets-were/">Tox told Vocativ in June</a>.</p><p>In an effort to help users find legitimate services, some dark web marketplaces offer the ability to leave seller and item reviews. The result ends up looking like an eBay seller's feedback page.</p><h2><strong>"excellent vendor, great communication, thx bro!"</strong></h2><p>A dark web marketplace called AlphaBay not only offers seller reviews but "vendor levels" indicating how much business a seller has done on the site and "trust levels" to help gauge a seller's honesty. The site also features an active forum where users discuss products, individual sellers, get help with using the site, and report scammers. For even more convenience, moderators for the site are assigned to help handle disputes.</p><p><div class="KonaFilter image-container display-table"><div><div class="image on-image"><p class="source"><span>AlphaBay/Screengrab</span></p><p class="caption">An overview of the feedback given to a seller on the dark net market AlphaBay.</p></div><p></p></div></div></p><p>In the scam report forum, one user has just reported receiving two packets of flour in a shipment that should have contained a Beretta pistol. In another thread, a seller accused of scamming intervenes to mention that he offered a refund. Even more incredibly, Alphabay will offer refunds to buyers in instances where the seller has been banned.</p><p>One seller on AlphaBay describes himself as a "friendly guy" who does his best to "keep you satisfied and help" and has 92% positive feedback for his efforts. In his listing for customizable ransomware, he mentions that he will set the service up for customers for a small fee.</p><p>"Excellent vendor, great communication, thx bro!!!" one user wrote on the seller's feedback page.</p><p>The vendor leaves a reply: "No problem, have fun mate!"</p><p>The exchange might look like any ordinary eBay feedback comments, except this sale was for "fullz": personal information used for identity theft.</p><p>When asked about the support he offers, he had a simple response:</p><p>"It's called hacking, friend. Sharing is the key to power, freedom, and success."</p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/humanoid-robot-iran-engineering-2015-12">Engineers in Iran have created a robot that imitates human behavior with scary accuracy</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="swOXVreTpmpcmC5vvlg1enl_n61wKup7" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

Competition among cyber criminals is so fierce that they now have customer support, service guarantees, and other perks

You Searched For "Goodwill ransomware" and got 3 results

GoodWill ransomware detected in India makes victim donate to poor, provides financial help to needy patients

PTI

How businesses can use escape rooms, phishing tests, and other creative tactics to fend off common cyberattacks, according to experts from Mastercard and the US government

Jacob E. Robbins

Competition among cyber criminals is so fierce that they now have customer support, service guarantees, and other perks

Dan Turkel

Popular Keywords

Buying Guides