October 2016 - skunkworks - Skunkworks Site

Fwd: FW: ODIN Ransomware
by Samson Ogada 11 Oct '16

11 Oct '16

Hi everyone, (From Locky to Zepto and now ODIN, ransomware at its highest peak. Pls read below and help your customers to be secured with Sophos Solns.) We have had at least 60 cases in the last week for ODIN Ransomware. ODIN is the latest variant of the Locky ransomware family. First version added .locky extensions, the second added .zepto, this one adds .odin. Sophos endpoint includes zero-day protection against this new variant and have been blocking it for about a week now. *IMPORTANT: for this protection to work the customer MUST have Malicious Traffic Detection (MTD) enabled.* When dealing with malware cases please always encourage customers to follow our best practice settings as it can be the difference between an attack being stopped or it succeeding. For onprem customers these settings can be found here: Recommended settings for Anti-Virus and HIPS <https://community.sophos.com/kb/en-us/114345> Onprem customers can also easily check if they are following best practice by using the PET tool: Sophos Enterprise Console - Sophos Policy Evaluation Tool <https://community.sophos.com/kb/en-us/122615> For Sophos Central customers it is much easier, they just have to go into their policies, select the Threat Protection tab and tick the box: [image: cid:image002.png@01D22083.88818580] Customers asking about ODIN can be given the NakedSecurity article: https://nakedsecurity.sophos.com/2016/10/06/odin-ransomware-takes-over-from- zepto-and-locky/ Customers asking about ransomware in general should be pointed to: www.sophos.com/ransomware Also for reference *CryptoGuard also stops ODIN* automatically. Regards, *Samson Ogada* | Presales Manager - Kenya S live:ogadasam | M +254 725 803 679 | E samson.ogada(a)sophos.com [image: SGN8] -- ------------------------------------------------------------------------------------------------------- *Best Web Designs, Computer Repair, Installations,* *Networking, Training, and Sales!!!!!!!!!*

1 0

Re: [Skunkworks] How to Remove Ransomware
by George Derry 11 Oct '16

11 Oct '16

Talking about this damn virus...have been hit this morning..find below attached copy of it... On Oct 11, 2016 8:11 AM, "Jiddah Konso via skunkworks" < skunkworks(a)lists.my.co.ke> wrote: You May try this site : https://www.nomoreransom.org/ good luck On Mon, Oct 10, 2016 at 8:29 PM, geoffrey gitagia via skunkworks < skunkworks(a)lists.my.co.ke> wrote: > @marcus ..lmao.. I work in a building named orbit.. Haya basi lemme > advise peeps to shed tears. > > On 10 Oct 2016 5:49 PM, "Odhiambo Washington" <odhiambo(a)gmail.com> wrote: > >> Alex, it's very possible, if you know what you are doing! >> >> On 10 October 2016 at 16:11, Alex Watila via skunkworks < >> skunkworks(a)lists.my.co.ke> wrote: >> >>> In this day and age how would you operate a computer without at least an >>> antivirus / antimalware? >>> >>> >>> >>> Regards, >>> >>> >>> >>> Alex >>> >>> >>> >>> >>> >>> *From:* geoffrey gitagia [mailto:ggitagia@gmail.com] >>> *Sent:* Monday, October 10, 2016 3:49 PM >>> *To:* Samson Ogada <ogadas(a)gmail.com>; Skunkworks Mailing List < >>> skunkworks(a)lists.my.co.ke> >>> *Cc:* awatila(a)yahoo.co.uk >>> >>> *Subject:* Re: [Skunkworks] How to Remove Ransomware >>> >>> >>> >>> Hi Guys >>> >>> >>> >>> i have a PC hit by Ceber , but as much as i've been transfering tools to >>> help in decrytping my laptop is still good , no antivirus just good old >>> microsoft defender doing its job and stop aut run apps and having UAC at >>> the recommended level , but anyhoo .. none of the online tools work, anyone >>> with a success story? >>> >>> >>> >>> On Thu, Oct 6, 2016 at 12:43 PM, Samson Ogada via skunkworks < >>> skunkworks(a)lists.my.co.ke> wrote: >>> >>> Try a new antiRansom product from Sophos. Try it for free >>> >>> >>> >>> Sophos Intercept X >>> <https://secure2.sophos.com/en-us/products/intercept-x/free-trial.aspx> >>> >>> >>> >>> >>> >>> regards, >>> >>> >>> >>> Samson >>> >>> >>> >>> On Thu, Oct 6, 2016 at 6:14 AM, Alex Watila via skunkworks < >>> skunkworks(a)lists.my.co.ke> wrote: >>> >>> *10 tips to protect your files from ransomware* >>> >>> >>> >>> >>> >>> https://blog.kaspersky.com/ransomware-10-tips/10673/ >>> >>> >>> >>> >>> >>> *From:* Alex Watila [mailto:awatila@yahoo.co.uk] >>> *Sent:* Thursday, October 6, 2016 6:12 AM >>> *To:* 'Odhiambo Washington' <odhiambo(a)gmail.com>; 'Skunkworks Mailing >>> List' <skunkworks(a)lists.my.co.ke> >>> *Cc:* 'Kevin Ochieng' <kevoti22(a)gmail.com> >>> *Subject:* RE: [Skunkworks] How to Remove Ransomware >>> >>> >>> >>> Kaspersky can protect you >>> >>> >>> >>> https://blog.kaspersky.com/ransomware-protection-video/8765/ >>> >>> >>> >>> >>> >>> regards, >>> >>> >>> >>> Alex >>> >>> >>> >>> *From:* Odhiambo Washington [mailto:odhiambo@gmail.com >>> <odhiambo(a)gmail.com>] >>> *Sent:* Wednesday, October 5, 2016 9:07 PM >>> *To:* alex watila <awatila(a)yahoo.co.uk>; Skunkworks Mailing List < >>> skunkworks(a)lists.my.co.ke> >>> *Cc:* Kevin Ochieng <kevoti22(a)gmail.com> >>> *Subject:* Re: [Skunkworks] How to Remove Ransomware >>> >>> >>> >>> Ransomware is NOT malware in the true sense of malware. Ransomware is >>> more like you personally decide to run a program that encrypts your files, >>> only this time it's not you :-) >>> >>> AFAICT, no antivirus will ever detect ransomware. Again, ransomware >>> requires the user to be gullible enough to run it. Sorry Kevin. >>> >>> >>> >>> On 5 October 2016 at 19:19, alex watila via skunkworks < >>> skunkworks(a)lists.my.co.ke> wrote: >>> >>> anti malware did not prevent the attack? >>> >>> >>> >>> On 5 Oct 2016 18:55, Kevin Ochieng via skunkworks < >>> skunkworks(a)lists.my.co.ke> wrote: >>> >>> Hi Pals, >>> >>> >>> >>> woke up today moring only to realise that all my folders in the server >>> were affected and replaced by - SJAWv2LVfy.b674 >>> >>> - README HTML Application >>> >>> >>> >>> Anyone gotten this attack before? >>> >>> >>> >>> *Kevin Ochieng'* >>> >>> >>> >>> >>> >>> Skype : kevinjanabi >>> >>> Phone : +254 733229214 >>> >>> +254727217330 >>> >>> >>> >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks(a)lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >>> >>> >>> >>> >>> -- >>> >>> Best regards, >>> Odhiambo WASHINGTON, >>> Nairobi,KE >>> +254 7 3200 0004/+254 7 2274 3223 >>> "Oh, the cruft." >>> >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks(a)lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >>> >>> >>> >>> >>> -- >>> >>> ------------------------------------------------------------ >>> ------------------------------------------- >>> >>> *Best Web Designs, Computer Repair, Installations,* >>> >>> *Networking, Training, and Sales!!!!!!!!!* >>> >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks(a)lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >>> >>> >>> >>> >>> -- >>> >>> GG >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks(a)lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >> >> >> >> -- >> Best regards, >> Odhiambo WASHINGTON, >> Nairobi,KE >> +254 7 3200 0004/+254 7 2274 3223 >> "Oh, the cruft." >> > > _______________________________________________ > skunkworks mailing list > skunkworks(a)lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke > _______________________________________________ skunkworks mailing list skunkworks(a)lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

1 0

HOW DO YOU HOST A WEB SERVER IN MIKROTIK
by Caroline Mwangi 10 Oct '16

10 Oct '16

Hi guys, I am doing a Captive Portal for a Mikrotik AP and I was wondering how I can host the Web page? I need to put a Web Server to host it but I was wondering how to go about it. Kindly assist. Kind regards, Caroline Mwangi.

4 5

Electromagnetic field tester machine
by Njaci 10 Oct '16

10 Oct '16

A friend is looking for an electromagnetic Field (EMF) tester machine....If you have or know someone who own one, kindly inbox me..

4 3

DOA
by Odhiambo Washington 10 Oct '16

10 Oct '16

FYI - I am hearing about DOA for the first time today. Are there any experts on that in here who can simplify it? https://www.google.co.kr/url?sa=t&source=web&rct=j&url=https ://www.itu.int/ITU-D/arb/ARO/2011/CyberSecurityForum-Eg/ Docs/Doc11-Sorene_18-12-2011.pptx&ved=0ahUKEwjsv8jc3c_PAhUU 82MKHeXuALIQFggZMAA&usg=AFQjCNGzWEx4VBdgLQYrceW-eme4GvjaWw -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

2 1

Linux/Odoo Expert
by Tom Musau 10 Oct '16

10 Oct '16

Dear Skunks, A friend is looking for an Odoo/Open ERP expertise or someone with extensive Linux based systems experience. If you have send your cv before there is no need to reapply. send cv offlst Kind Regards Tom

1 0

Dot Net
by Nicholas Mutinda 09 Oct '16

09 Oct '16

Hey, Looking for someone who can work on a dot net project, specifically web app. -- Regards, Mutua Nicholas *He owns, I manage.*

2 1

Re: [Skunkworks] skunkworks Digest, Vol 29, Issue 7
by Edwin Kipriotich 07 Oct '16

07 Oct '16

Hi Shunks, I am in need of ArcGIS Desktop *software*. v9/v10. Any leads and price for me will be appreciated. *Best regards,* *Kiprotich Edwin <https://plus.google.com/u/0/+KiprotichEdwin/about>* *IT Admin (MIS) <https://ke.linkedin.com/in/kiprotich-edwin-40a92873>* Pioneer Campuses Moi Avenue P.O.BOX 2768-00200 Nairobi. Tel: 0712161611, 0720 554 205, Zetech University <https://plus.google.com/u/2/+KiprotichEdwin/about> E-Learning <https://plus.google.com/u/2/+KiprotichEdwin/about> Like us on Facebook <https://www.facebook.com/kiprotich.edwin.50> Follow us on Twitter <https://twitter.com/KiprotichEdwinK> Follow us on Instagram <https://instagram.com/chemurto/> Free online web tools like Google Docs <http://docs.google.com/> are an excellent place for students to work on group projects or papers, take shared notes, etc. Teacher *or* students can set up group collaborations. On Wed, Oct 5, 2016 at 8:56 AM, <skunkworks-request(a)lists.my.co.ke> wrote: > Send skunkworks mailing list submissions to > skunkworks(a)lists.my.co.ke > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > or, via email, send a message with subject or body 'help' to > skunkworks-request(a)lists.my.co.ke > > You can reach the person managing the list at > skunkworks-owner(a)lists.my.co.ke > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of skunkworks digest..." > > > Today's Topics: > > 1. Re: Office 2013 Quotes (Lavenda Watila) > 2. Re: Office 2013 Quotes (Alvin Ochola) > 3. Most Hackable Countries on the Internet: KE #11 (Jared Koyier) > 4. Re: skunkworks Digest, Vol 29, Issue 6 (Edwin Kipriotich) > 5. Re: Does Pesapal return amount paid, MPESA confirmation code > ? (Ken Muturi) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 5 Oct 2016 08:08:43 +0300 > From: Lavenda Watila <lavywatila(a)gmail.com> > To: m mugo <mugo2of3(a)gmail.com>, Skunkworks Mailing List > <skunkworks(a)lists.my.co.ke> > Subject: Re: [Skunkworks] Office 2013 Quotes > Message-ID: > <CAEgJsEGrEVabxsqQ-68ncaM+asVwcv9EcwR3mdrEp_KhfamFMQ@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > If you are a non profit making sign up with techsoup Kenya you will get it > at 4167 > > On 4 Oct 2016 16:08, "m mugo via skunkworks" <skunkworks(a)lists.my.co.ke> > wrote: > > > Hello list members. > > > > Looking for a few of the subject matter. > > > > Regards, > > Mugo2of3 > > > > _______________________________________________ > > skunkworks mailing list > > skunkworks(a)lists.my.co.ke > > ------------ > > List info, subscribe/unsubscribe > > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > > ------------ > > > > Skunkworks Rules > > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > > ------------ > > Other services @ http://my.co.ke > > >

2 1

Office 2013 Quotes
by m mugo 07 Oct '16

07 Oct '16

Hello list members. Looking for a few of the subject matter. Regards, Mugo2of3

10 16

Sacco IT Manager / Sys Admin
by Jose Muga 07 Oct '16

07 Oct '16

Hi, Requesting for anyone here who performs the above duties. I need some help on something. Reach me on 0721930681 or PM me. Thanks Regards Muga

1 0