A nasty self-replicating ransomware, dubbed "VirRansom," is now making the rounds - utilizing the functionality of CryptoWall and Cryptolocker, able to self-replicate after infecting machines. Victims must pay 0.619 bitcoin before files are restored, as it compromises machines. The VirRansom parasitic virus encrypts hundreds or thousands of files on each PC, with criminals ensuring they are able to continually change encryption keys.
"Ransomware gets nastier all the time," said Stu Sjouwerman, KnowBe4 CEO, in a press statement. We can expect a VirRansom 2.0 with 'new features' like industrial-strength CryptoWall-like encryption where files are held hostage until payment is made and email server infections where emails are converted to a worm for maximum dissemination of their malicious code. The legal ramifications could be horrific."
Companies are recommended to verify offsite backups are working, consider asynchronous real-time backups, remove mapped drives on shared folders, whitelist software, and update security policies.