断背山

Ryuk，一个新的勒索软件，针对大公司：六个月内近400万美元_我的网站

A |     Kathmandu, Oct 12 (UNI) At least 33 people have died in floods and landslides across western Nepal in the past week, local media reports say.
The worst of the monsoon rains hit Karnali province in the north-west, where thousands of residents were evacuated, officials said.
Nepal is nearing the end of its monsoon season, which typically begins in June and ends in October.
At least 110 people have died this year in rain-related disasters, according to the National Emergency Operation Centre.
Hundreds of homes have been damaged in the avalanches and flooding. At least 22 people are still missing across the province and scores more have been injured, the BBC reported.
Rescuers have described difficulties in getting to the mountainous region amid continued rain.
'We have mobilised police officers on the ground. We have arranged a helicopter for air rescue from Surkhet," said one police spokesman, quoted by the Annapurna Post.
"However, unfortunately, due to the weather not improving, progress is not being made as expected."
Most reports of missing people came from the low-lying Kalikot district. Thousands were evacuated from their homes there in the past week amid warnings of intense rain.
In some areas of the province, the Karnali river had risen to over 39ft , Nepal's emergency authorities said.
Several suspension bridges over the river had also been washed away, local media reported.
Government officials have dispatched aid to the region on helicopters.
The UN's humanitarian agencies said they were distributing food and medicine to the worst affected communities in western Nepal.
UNI ING。北京时间1月14日早些时候，美国科技媒体arstechica引用了信息安全公司Crowdstrike和Fireeye周四发布的两项研究，显示最近发现的一个勒索软件组织自去年8月以来已经赚了近400万美元。该组织在该行业选择了一种不寻常的做法：有选择地为最初受到感染且经济实力雄厚的目标植入恶意加密软件。这与使用勒索软件感染所有潜在受害者的常见策略不同。两份报告都显示，该组织用一种叫Ryuk的勒索软件感染了大型企业。几天，几周，甚至一年前，这些目标中的大多数已经感染了一种名为trickbot的特洛伊木马。相比之下，小企业在被Trickbot感染后很少受到Ryuk的攻击。Crowdstrike表示，这种方法是“寻找大目标”，自去年8月以来，其运营商已从52笔交易中赚取370万美元比特币。除了精确定位，这种方法还有其他好处：有一个“停留时间”，从最初感染到安装勒索软件之间的一段时间。

B | 这给攻击者分析受感染网络的时间，从而确定网络中最关键的系统，并获取受感染系统的密码，然后释放勒索软件，从而造成最大的损害。

C | （张帆）。

Current article:http://www.deshabisaoguonouzuo.cfd/list_ph7/eg7.pptx

Published on:11:10:20