Cryptolocker GOZeuS
What is it? Is your Data Secure and will a Data Service help you if you are infected.
GOZeuS are a pair of viruses both infecting computers at the same time.
GOZeuS (P2Pzeus / Game Over Zeus) – is a malware / spyware that once installed on users computers will spy on the user and seek out valuable financial data eg bank details. This data will be fed back to the criminals who can use the data to defraud the user. All of this unknown to the user.
Cryptolocker – is Ransomeware. After GOZeus has spent some days extracting data Cryptolocker turns on and encrypts common files eg Word or Excel, so that users cannot access their important data. A message pops up on screen telling the user how they can pay $300 to $600 to unlock their data.
Although it is possible to remove these nasty pair, it will be nearly impossible to access the encrypted files.
Unprecedented global co-operation to limit the damage that Crypto Locker & GO ZeuS will cause.
The FBI in the US, Europol in Europe and the National Crime Agency along with many other Government agencies around the world, plus all of the large internet companies around the world have been working together in recent weeks to try to prevent massive attacks expected against millions of computers dring June 2014.
Although this twin virus has been around since 2013 the criminals have been planning a massive propogation of the viruses by using 1000’s of already infected computers owned by innocent users around the globe, who have no idea what their computer is about to unleash on other innocents.
It is undeerstood that Russian hacker Evgeniy Mikhailovich Bogachev and over 90 others around the world have already been arrested and authorities have been able to shut sown many of the main controlling computers that the criminals had access to. However the virus does not need these computers or the criminals to spread further.
Authorities expect many of these ‘zombie bots’ sitting on peoples computers will awaken before the middle of June 2014 and start their attacks on other computers.
Data Recovery Services will be able to remove the virus, but if it has locked your data this will be lost forever.
What can you do:
- Backup important files now.
- Make sure your operating system is up to date.
- Make sure your anti-virus software is up to date – if you do not have anti virus softaware – install it urgently.
- If there is ANY doubt about email attachments that you receive DO NOT open them – even if they come from a person or organisation that you know. These computers could be hijacked and the virus sent in an attachment from what you think is someone you know. An unfamliar email subjest line from someone you know may be a clue. If in any doubt, reply to the email and ask them if the attachment is genuine.
- Similarly, if there is ANY doubt about links in emails you receive, particularly if they seem to come from a large organisation you know DO NOT click the link. Type in the web address of the company you know and click through their navigation to the page you think you need to go. If necessary call them and ask if the email is genuine.
- Many of the anti-virus companies have a free tol available to check if your computer is infected. Contact the company that provides your antivirus software.
You can read more at Bloomberg.com