Monday, September 21, 2020

ESET Discovered the Destructive KillDisk Malware

The new variant of KillDisk encrypts Linux machines, making them unbootable with data permanently lost. Despite the fact that the malware’s design doesn’t allow for the recovery of encrypted files, as encryption keys are neither stored nor sent anywhere, the criminals behind KillDisk demand 250 thousand USD in Bitcoins. Fortunately, ESET researchers found a weakness in the encryption employed which makes recovery possible, albeit difficult.

“KillDisk serves as another example of why paying ransom should not be considered an option. When dealing with criminals, there’s no guarantee of getting your data back – in this case, the criminals clearly never intended to deliver on their promises. The only safe way of dealing with ransomware is prevention. Education, keeping systems updated and fully patched, using a reputable security solution, keeping backups and testing the ability to restore – these are the components of true insurance,” says Robert Lipovský, ESET Senior Researcher.

KillDisk is a destructive malware that gained notoriety as a component of the successful attack performed by the BlackEnergy group against the Ukrainian power grid in December 2015. More recently, ESET researchers detected planned cyber-sabotage attacks against a number of different targets within Ukraine’s financial sector. Since then, KillDisk attack campaigns have continued, aimed at several targets in the maritime transport sector.

The attack toolset has evolved and recent variants of KillDisk serve as file-encrypting ransomware. Initially targeting Windows systems, the version targeting Linux machines – not only affects Linux workstations but also servers, amplifying the damage potential.

Figure 1 – Linux KillDisk ransom message. In the Windows variant, the ransom message is exactly the same, including the ransom amount, Bitcoin address, and contact email.

MOST READ

stc Bahrain joins stc Group as the diamond sponsor of Virtual Capacity Middle East

stc Bahrain, a world-class digital enabler, joins stc group Kuwait and KSA as a Diamond sponsor of the virtual Capacity Middle East Conference 2020,...

Health Minister receives Indian ambassador

Health Minister Faeqa bint Saeed Al Saleh, received Indian Ambassador to Bahrain Piyush Srivastava. The minister praised the historical relations between Bahrain and India in...

Declaration Supporting Peace: A historic, brave step aimed to enhance regional security and stability

The declaration supporting peace signed by the Kingdom of Bahrain with the State of Israel is a historic move towards establishing peace in the...

Adherence to precautionary measures national responsibility

President of the Supreme Council of Health and Chairman of the National Medical Taskforce for Combating Coronavirus (COVID-19) Lieutenant-General Dr. Shaikh Mohammed bin Abdulla...

Health Minister urges compliance to reduce COVID-19 infections

Health Minister Faeqa bint Said Al-Saleh urged full compliance with the mandatory precautionary measures to curb the spread of the novel coronavirus (COVID-19). She called...

KHK MMA dominates at BRAVE CF 41 with four huge victories

BRAVE Combat Federation hosted the first of three groundbreaking events last Thursday in the Kingdom of Bahrain, with seven bouts taking place behind closed...

Interior Minister: valid PCR certificates for entry to Bahrain via causeway

The Interior Minister General Shaikh Rashid bin Abdullah Al Khalifa said that Polymerase chain reaction (PCR) certificates accredited by the Saudi Health Ministry within 72...

“Virtual Bahrain 2020” conference, exhibition kicks off Tuesday

Under the patronage of Mohammed Ali Al Qaed, Chief Executive of the Information and eGovernment Authority, the "Virtual Bahrain 2020" conference and exhibition will...

Zain Bahrain introduces Zain Digital Natives Advancement Program for newly recruited Gen Z Bahraini employees

Zain Bahrain, a leading telecommunications operator in the Kingdom of Bahrain, fuelled by the passion to empower Bahraini youth with specific skills, recently announced...

HH Khalid bin Hamad congratulates ‘Your Talent at Home’ winners

First Deputy Chairman of the Supreme Council for Youth and Sport (SCYS) and President of Bahrain Olympic Committee (BOC) His Highness Shaikh Khalid bin...

The aftermath of a historic night for BRAVE CF and Arab MMA

BRAVE Combat Federation’s vision of globalizing the sport started within the Arab world, which was often overseen by many other organizations, and to provide...

iGA announces jump in usage of government app & eServices

Government digital transformation efforts are proceeding at breakneck speed, as reflected by the quarterly eServices statistics report, which recorded a 20 fold surge in...

CBB warns consumers when dealing with personal and banking information

The Central Bank of Bahrain (CBB) called on consumers to be cautious and vigilant when dealing with their personal and banking information. This warning came...

RHF Secretary-General visits flood-affected areas in Sudan

Royal Humanitarian Foundation (RHF)'s Secretary-General Dr. Mustafa Al-Sayed, visited some areas affected by the floods and torrents that swept Sudan. This came under the directives...

Bahrain marks World Patient Safety Day

Bahrain joins the world in marking the World Patient Safety Day observed on September 17. This year's theme is “Health Worker Safety: A Priority...