[問題]Ransomware中毒途徑

alexwang

除左exe, js, macro之外, 仲有無其他途徑會中毒?
係browser會唔會中?
暫時只係聽過IE6好似會

NOSTALE

除左exe, js, macro之外, 仲有無其他途徑會中毒?
係browser會唔會中?
暫時只係聽過IE6好似會 ...
alexwang 發表於 2016-4-29 15:17

    絕對會

    一開網頁,廣告內有ransomware,如果無裝防毒,即時PK

alexwang

即係chrome都會中?
望過ransomware, D anti-virus根本detect唔到佢, 只係事後先會alert

NOSTALE

即係chrome都會中?
望過ransomware, D anti-virus根本detect唔到佢, 只係事後先會alert
alexwang 發表於 2016-4-29 17:43

    用任何瀏覽器都會有機會中,邊有人可以100%保證唔會中

  防毒,都只係可以detect已知ransomware , detect唔到係因為你中左D新變種ransomware

alexwang

但我想知概係點透過browser去令人中毒

舉個例, IE6行javascript係local行execute
但係例如chrome咁, 佢本身係sandbox行javascript, 亦唔會俾js行到local command

先感謝

NOSTALE

但我想知概係點透過browser去令人中毒
舉個例, IE6行javascript係local行execute
但係例如chrome咁, 佢本身 ...
alexwang 發表於 2016-4-29 17:58

    以我自己試過中,就係睇一段影片,flash player 就中左蕉 係用Chrome

   All Files Encryption

alexwang

以我自己試過中,就係睇一段影片,flash player 就中左蕉 係用Chrome

   All Files Encryption ...
NOSTALE 發表於 2016-4-29 18:12

正正係想搵呢類case...
純討論, 請諒解

但你呢個case係flash去行
8 Apr出左patch -> http://www.computerworld.com/art ... somware-itbwcw.html

我反而最想知係javascript, flash都仲可以做到野, 但js唔可以block

carlkyo

我有個joomla網頁俾人hack左
http://www.hkepc.com/forum/viewthread.php?tid=2254941
一開始用IE kaspersky就會彈木馬
之後IE8會
我已經成個網頁全部刪除
用https://sitecheck.sucuri.net/檢查同用kaspersky
不過個it consultant係度話

Deleting all the files cannot remove the virus.
Hence we need to conduct a low level formatting to format the disk, otherwise the virus could recovery easily.
In addition to announcing that the website is under maintenance, since the ransomware can distribute to the visitors while they visited our site.  We should consider putting pu the warning to alert the visitors that they should check and protect their computers from ransomware too.
cheers,

有事一早中左啦.以為教授就咩都係專家

skywolf08

我用firefox + no scripts. (disable autoload js, flash)
no scripts 要自已整whitelist/blacklist.

ways

我到而家為止仲未中到.....真係好擔心.....上個網都搞到人心惶惶