VNCERT has a issued high alert for internet-connected computers because GrandCrab’s ransomware contains high risks and could steal and encrypt all data saved. (Photo: thoibaotaichinhvietnam.vn) Hanoi (VNA) - The Vietnam Computer Emergency Response Team (VNCERT)has warned that GandCrab ransomware affiliates which had been spreadingglobally over the past year had updated to version 5.2 and the team was takingmeasures to disconnect with GandCrab server to avoid damages.
VNCERT's deputy head NguyenKhac Lich said the latest version of the ransomware family had been attacking Vietnamand other Southeast Asian countries since mid-March this year.
VNCERT has issued a high alert forinternet-connected computers because GandCrab’s ransomware contains high risksand could steal and encrypt all data saved on attacked computers.
In Vietnam, GrandCrab5.2 ransomware is concealed as archive files ending with documents that endwith .rar attached in emails disguised as being sent by the Ministry of PublicSecurity titled “Goi/Gei trong Cong an Nhan dan Viet Nam”.
The encryption attacksthe computer when users decompress or open the attached files and directsto download a browser which then logs into the attacker’s digital currencypayment window with the required ransom package of 400 USD to 1,000 USD.
VNCERT has askedorganisations and companies to disconnect from the ransomware server and updatethe disconnect information on security systems like IDS/IPS to avoid furtherlosses.
In case of attacks,computers must be isolated, the team has warned.
The team also warnedorganisations and companies to make users aware of the ransomware information.Email users are warned not to click links or open files that end with .doc,.pdf, .zip, .rar and are sent by strangers or have abnormal titles.
VNCERT disconnected fromservers with version 1.0 and 2.0 in April last year and is assisting internetusers to decrypt GrandCrab 5.1.-VNA
VNA
