September 2016 - skunkworks

Ransomware Overview Spreadsheet...
by Michael Bullut 24 Sep '16

24 Sep '16

Greetings Team, Checkout the following *spreadsheet. <https://docs.google.com/spreadsheets/u/1/d/1TWS238xacAto-fLKh1n5uTsdijWdCEs…>* You might get lucky and find a decryptor on it that you can use. Warm regards, Michael Bullut. --- *Cell:* *+254 723 393 114.**Skype Name:* *Michael Bullut.* *Twitter:* * @Kipsang <http://twitter.com/Kipsang/>* *Blog: http://www.kipsang.com/ <http://www.kipsang.com/>* *E-mail:* *main(a)kipsang.com <main(a)kipsang.com>* *---*

1 0

PRINCE2 certification
by david kimungui 23 Sep '16

23 Sep '16

Hi Skunks, Anyone with a recommendation for an accredited college which offer PRINCE2 certification at an affordable cost preferably local college. Your feedback will be highly appreciated. Regards

14 15

Complaints Handling System
by James Kagwe 22 Sep '16

22 Sep '16

Friends, I am in need of a good complaint handling system. This is for use in a public institution which doesn't do direct sales and the nature of complaints borders on issues of service delivery. If you have successfully implemented a system like that or know of one existing in a certain organization, kindly get in touch with me. regards, James Kagwe

3 2

Re: [Skunkworks] Cerber Ransomware
by Ensquire Moha 22 Sep '16

22 Sep '16

Maisiba, my friends desktop got encrypted. I understand they released version 3 last week which encrypted my friends computer. All the options which worked in version 1 and 2 are not working. Ransom was 41k for three days but from today it doubled to 80k. On Sep 21, 2016 13:40, "Maisiba Bravo via skunkworks" < skunkworks(a)lists.my.co.ke> wrote: Any victim? Bravo _______________________________________________ skunkworks mailing list skunkworks(a)lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

2 1

Ransomware Decryptor...
by Michael Bullut 22 Sep '16

22 Sep '16

Greetings Team, Check it out: *https://noransom.kaspersky.com/ <https://noransom.kaspersky.com/>* Warm regards, Michael Bullut. --- *Cell:* *+254 723 393 114.**Skype Name:* *Michael Bullut.* *Twitter:* * @Kipsang <http://twitter.com/Kipsang/>* *Blog: http://www.kipsang.com/ <http://www.kipsang.com/>* *E-mail:* *main(a)kipsang.com <main(a)kipsang.com>* *---*

1 0

Re: [Skunkworks] Cerber Ransomware
by Maisiba Bravo 22 Sep '16

22 Sep '16

*Avoid* Ammyy Admin website <http://ammyy.com> *The website is compromised to spread Cerber 3 Ransomware.* http://news.softpedia.com/news/ammyy-admin-website-compromised-to-spread-ce… There are some decryption softwares as quoted in some articles, feared to try any tho' Bravo On Wed, Sep 21, 2016 at 2:39 PM, David K. Kandie <kipkanists(a)gmail.com> wrote: > I am victim - still looking for help. All files are now .cerber and have > also synced with Office 365 > ------------------------------ > From: charles kungu via skunkworks <skunkworks(a)lists.my.co.ke> > Sent: ‎9/‎21/‎2016 2:23 PM > To: Maisiba Bravo <riggson87(a)gmail.com>; Skunkworks Mailing List > <skunkworks(a)lists.my.co.ke> > Subject: Re: [Skunkworks] Cerber Ransomware > > Yeap. My cleint was attacked by batman_good(a)aol.com.xtbl > > They encrypted some files, and changed them to .xtbl format, still > figuring how to decry pt the files that were not backed up. > > On Wed, Sep 21, 2016 at 1:34 PM, Maisiba Bravo via skunkworks < > skunkworks(a)lists.my.co.ke> wrote: > >> Any victim? >> >> >> Bravo >> >> _______________________________________________ >> skunkworks mailing list >> skunkworks(a)lists.my.co.ke >> ------------ >> List info, subscribe/unsubscribe >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke >> > > > > -- > Regards, > C . K > > > > > > > > > > > > > >

10 10

Re: [Skunkworks] skunkworks Digest, Vol 28, Issue 120
by Emmanuel Sekyewa 21 Sep '16

21 Sep '16

For Windows Server shares, one way to mitigate the spread of ransomware files is by using FSRM to create a filter for files with the ransomware payloads file name extension. It should block the writing of such files and notify you which user's pc is attempting to write the offending file onto the network shared. Regards On 21 Sep 2016 19:33, <skunkworks-request(a)lists.my.co.ke> wrote: > Send skunkworks mailing list submissions to > skunkworks(a)lists.my.co.ke > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > or, via email, send a message with subject or body 'help' to > skunkworks-request(a)lists.my.co.ke > > You can reach the person managing the list at > skunkworks-owner(a)lists.my.co.ke > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of skunkworks digest..." > > > Today's Topics: > > 1. Re: Cerber Ransomware (Marcus Cicero) > 2. Re: Cerber Ransomware (Alex Watila) > 3. Re: Cerber Ransomware (Chris Ochieng) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 21 Sep 2016 11:12:39 -0400 > From: Marcus Cicero <marcus.cicero(a)protonmail.com> > Cc: Skunkworks Mailing List <skunkworks(a)lists.my.co.ke> > Subject: Re: [Skunkworks] Cerber Ransomware > Message-ID: > <x368ubtrymCZ_ug0pEmj4n4JFV8GPyWgD8aZim_ > PscDuJQQvIpK2PR4f003MhERl6D5u2Nv8-Qv0g0i5mVwQ8g==(a)protonmail.com> > > Content-Type: text/plain; charset="utf-8" > > You do know M$ Windows has had this ability built in since the days of XP? > > > -------- Original Message -------- > Subject: Re: [Skunkworks] Cerber Ransomware > Local Time: 21 September 2016 3:36 PM > UTC Time: 21 September 2016 12:36 > From: skunkworks(a)lists.my.co.ke > To: Maisiba Bravo <riggson87(a)gmail.com>, Skunkworks Mailing List < > skunkworks(a)lists.my.co.ke> > > > While you guys are working on this, I have seen two situations where both > Cerber and Zepto ransomware messed up two entities. > > Since then, I have been thinking about how to always be ready to mitigate > the effects. And the surest way is backup, backup, backup. > > In situations where files are stored on shared drives on the network, the > situation is even worse should the share not have a backup elsewhere. > > In the meantime, this tool should help Windows users create backups -> > http://www.2brightsparks.com/download-syncbackfree.html >

1 0

Cerber Ransomware
by Maisiba Bravo 21 Sep '16

21 Sep '16

Any victim? Bravo

4 3

WIRELESS ACCESS POINTS--WHY?
by Cynthia Wahome 21 Sep '16

21 Sep '16

Hello All. Asking all Network Engineers especially in the Wireless Field. >From my observations in most places,eg restaurants,coffee shops etc,most of the Access Points in use are 2.4GHz AP.Now we can all agree that 2.4Ghz spectrum is usually fully congested,hence sometimes even the experience becomes bad for people. I see most establishments are either using TP-Links,Ubiquiti Nanostations or Unifi and others rely on the ISP provided router. An equipment like Unifi tends to start degrading after reaching around 40 users. Now with the way the trend is going,most devices are now even coming with dual band chipsets eg iphones and the like. My question to the forum is. 1) Why don't establishments want to put dual-band APs? 2) is their a good dual-band AP that somebody can recommend? I know equipments like Ruckus and Xirrus can get the job done..but we all know that few companies will cough up large amounts of cash for just an AP. what are your thoughts? Regards Cynthia.

14 16

GoTV - Suddenly Breaches contract - PayTV for Local Channels
by ndungu stephen 21 Sep '16

21 Sep '16

The government assured all Kenyans that local channels will be free. My local channels suddenly go off and GoTV says they pulled the "free to air" two months ago - and from hence we have to pay. Was this a plan by the Government ? Who is protecting the consumers? Where can one raise this issue ? BR/ Stephen N.

3 4