Extremely dangerous ransomware is attacking Vietnam.
The Vietnam National Computer Emergency Response Center (VNCERT) has just detected a GandCrab ransomware campaign spreading in many countries around the world, including Vietnam.
 |
According to VNECRT, the GandCrab ransomware is very dangerous, capable of stealing information and encrypting all data on infected machines; hackers exploiting and attacking it will cause many other serious consequences. GandCrab ransomware is spread through the RIG vulnerability exploitation toolkit. When infected, all data files on the user's machine will be encrypted, and the file extensions will be changed to *.GDCB or *.CRAB. Simultaneously, the malware generates a CRAB-DECRYPT.txt file demanding and instructing the user to pay a ransom of $400-$1,000 via DASH cryptocurrency to decrypt the data.
VNCERT requires IT and information security units to monitor and block connections to the GandCrab ransomware command and control servers and update protection systems such as IDS/IPS, Firewall, etc. In case of detecting GandCrab malware, agencies, units, and businesses are required to quickly isolate the infected area/machine and report to the VNCERT Center (telephone: 024 3640 4423 extension 112, hotline 0869 100319/ 0888 609399, email address for incident reporting is...).[email protected].
VNCERT also advises users to be vigilant and avoid opening or clicking on links or attachments in emails containing files in .doc, .pdf, .zip formats, etc., sent from strangers, or even from acquaintances if the subject line or language is unusual.
