<\/p>\n\n\n\n
<\/p>\n\n\n\n
Describing how the cybercrime group runs the ransomeware, the ngCERT advisory says the USB drives contain so-called ‘BadUSB’ attacks. The BadUSB exploits the USB standards versatility and allows an attacker to reprogram a USB drive to emulate a keyboard to+ create keystrokes and commands on a computer. It then installs malware prior to the operating system booting, or spoofs a network card to redirect traffic.<\/p>\n\n\n\n
Numerous attack tools are also installed in the process that allows for exploitation of personal computers (PCs), lateral movement across a network, and installation of additional malware. The tools were used to deploy multiple ransomware strains, including BlackBatter and REvil.<\/p>\n\n\n\n
According to ngCERT, the attack has been seen in the US where the USB drives were sent in the mail through the Postal Service and Parcel Service. One type contained a message impersonating the US Department of Health and Human Services and claimed to be a COVID-19 warning. Other malicious USBs were sent in the post with a gift card claiming to be from Amazon.<\/p>\n\n\n\n
However, ngCERT has offered recommendations that will enable corporate and individual networks to mitigate the impact of this new cyber attack and be protected from the ransomware.<\/p>\n\n\n\n
These recommendations include a call on individuals and organisations not to insert USB drives from unknown sources, even if they\u2019re addressed to you or your organization. In addition, if the USB drive comes from a company or a person one is not familiar with and trusts, it is recommended that one contacts the source to confirm they actually sent the USB drive.<\/p>\n\n\n\n
Finally, ngCERT has advised Information and Communication Technology as well as other Internet users to report any incident of system compromises to ngCERT via incident@cert.gov.ng,<\/em> for technical assistance.<\/p>\n","protected":false},"excerpt":{"rendered":" Describing how the cybercrime group runs the ransomeware, the ngCERT advisory says the USB drives contain so-called ‘BadUSB’ attacks. The BadUSB exploits the USB standards versatility and allows an attacker to reprogram a USB drive to emulate a keyboard to+ create keystrokes and commands on a computer. It then installs malware prior to the operating […]<\/p>\n","protected":false},"author":1,"featured_media":5110,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[73],"tags":[],"class_list":["post-6686","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/6686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/comments?post=6686"}],"version-history":[{"count":0,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/6686\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media\/5110"}],"wp:attachment":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media?parent=6686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/categories?post=6686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/tags?post=6686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}