{"id":1031,"date":"2018-01-17T16:08:11","date_gmt":"2018-01-17T14:08:11","guid":{"rendered":"https:\/\/msb365.abstergo.ch\/?p=1031"},"modified":"2023-06-23T13:15:44","modified_gmt":"2023-06-23T11:15:44","slug":"ransomware-strain-encripts-cloud-email","status":"publish","type":"post","link":"https:\/\/www.msb365.blog\/?p=1031","title":{"rendered":"Ransomware Strain Encripts Cloud Email"},"content":{"rendered":"<p>A new ransomware strain dubbed as &#8220;ransomcloud&#8221; has been developed and it can encrypt online email accounts like Office 365 and Gmail in real-time.<\/p>\n<p>&nbsp;<\/p>\n<p>The new ransomware strain was reportedly developed by a white hat hacker associate of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Kevin_Mitnick\" target=\"_blank\" rel=\"noopener\">Kevin Mitnick<\/a>, Chief Hacking Officer of cybersecurity company KnowBe4.<\/p>\n<p>&nbsp;<\/p>\n<p>Similar to other methods of ransomware infections, cybercriminals can trick victims into installing the malicious software with phishing scams loaded with poisoned attachments or links.<br \/>\nThis new strain uses a smart social engineering tactic to trick the user to give the bad guys access to their cloud email account, with the ruse of a &#8220;new Microsoft anti-spam service&#8221;.<br \/>\nAs soon as the victim clicks the link and accepts the &#8220;service&#8221; by logging into the cloud email account and granting the fake app the permissions it needs, it will then encrypt all your online emails and attachments in real-time!<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-1032\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/01\/1-3.png\" alt=\"\" width=\"755\" height=\"570\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/01\/1-3.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/01\/1-3-300x227.png 300w\" sizes=\"(max-width: 755px) 100vw, 755px\" \/><\/p>\n<p>This attack will likely work with any cloud email service, such as Gmail and Outlook365, that allows third-party apps control over the account via an authorization system called OAuth.<\/p>\n<p>&nbsp;<\/p>\n<p>In the Video below you can see how it works and there are only 5 min needed for it!<br \/>\n<iframe  id=\"_ytid_20707\"  width=\"480\" height=\"270\"  data-origwidth=\"480\" data-origheight=\"270\" src=\"https:\/\/www.youtube.com\/embed\/VX59Gf-Twwo?enablejsapi=1&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;\" class=\"__youtube_prefs__  epyt-is-override  no-lazyload\" title=\"YouTube player\"  allow=\"fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen data-no-lazy=\"1\" data-skipgform_ajax_framebjll=\"\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n<p>To read the original Article I recommend you the Blog entry of <a href=\"https:\/\/community.spiceworks.com\/people\/stu-knowbe4\" target=\"_blank\" rel=\"noopener\">Stu Sjouwerman<\/a>. He works with Kevin Mitnick and here you can get to the <a href=\"https:\/\/community.spiceworks.com\/topic\/2104688-heads-up-new-ransomware-strain-encrypts-cloud-email-real-time-video\" target=\"_blank\" rel=\"noopener\"><strong>article.<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new ransomware strain dubbed as &#8220;ransomcloud&#8221; has been developed and it can encrypt online email accounts like Office 365 and Gmail in real-time. &nbsp; The new ransomware strain was reportedly developed by a white hat hacker associate of Kevin Mitnick, Chief Hacking Officer of cybersecurity company KnowBe4. &nbsp; Similar to other methods of ransomware [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1923,42],"tags":[],"class_list":["post-1031","post","type-post","status-publish","format-standard","hentry","category-microsoft-365","category-varia"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1031"}],"version-history":[{"count":2,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1031\/revisions"}],"predecessor-version":[{"id":1036,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1031\/revisions\/1036"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1031"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1031"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}