no, i'm not saying it's a waste of time/doesn't work, but educating users and making them understand what seems like common sense to us is probably the most difficult task i get to do...every other day..."user education"...any of you ever got this to work - as expected?...--On Wed, Sep 21, 2016 at 7:16 PM, Alex Watila via skunkworks <skunkworks@lists.my.co.ke> wrote:Wash,
Please note that the backup can contain the ransomware since some work with a time bomb.
So in addition to backup include other measures such as antimalware, patched systems, user education etc
Regards,
From: Odhiambo Washington via skunkworks [mailto:skunkworks@lists.my.co
.ke ]
Sent: Wednesday, September 21, 2016 3:36 PM
To: Maisiba Bravo <riggson87@gmail.com>; Skunkworks Mailing List <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Cerber Ransomware
While you guys are working on this, I have seen two situations where both Cerber and Zepto ransomware messed up two entities.
Since then, I have been thinking about how to always be ready to mitigate the effects. And the surest way is backup, backup, backup.
In situations where files are stored on shared drives on the network, the situation is even worse should the share not have a backup elsewhere.
In the meantime, this tool should help Windows users create backups -> http://www.2brightsparks.co
m/download-syncbackfree.html
On 21 September 2016 at 14:48, Maisiba Bravo via skunkworks <skunkworks@lists.my.co.ke> wrote:
Avoid Ammyy Admin website
The website is compromised to spread Cerber 3 Ransomware.
There are some decryption softwares as quoted in some articles, feared to try any tho'
Bravo
On Wed, Sep 21, 2016 at 2:39 PM, David K. Kandie <kipkanists@gmail.com> wrote:
I am victim - still looking for help. All files are now .cerber and have also synced with Office 365
From: charles kungu via skunkworks
Sent: 9/21/2016 2:23 PM
To: Maisiba Bravo; Skunkworks Mailing List
Subject: Re: [Skunkworks] Cerber RansomwareYeap. My cleint was attacked by batman_good@aol.com.xtbl
They encrypted some files, and changed them to .xtbl format, still figuring how to decry pt the files that were not backed up.
On Wed, Sep 21, 2016 at 1:34 PM, Maisiba Bravo via skunkworks <skunkworks@lists.my.co.ke> wrote:
Any victim?
Bravo
_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
--Regards,
C . K
_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."
_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke