Cybercriminals can launch new types of attacks on Windows and Linux PCs. Experts warn that they can claim the money by attacking the PC with special viruses or malware. They have named this ransomware or malicious program 'Tycoon' which is capable of hiding behind special tactics.
According to the technology website Zedinet, BlackBerry researchers discovered the tycoon while working with KPMG's security analysts and detailed it.
Cybercriminals can carry out ransomware attacks on Windows and Linux systems. Seeing its code reference, it has been named 'Tycoon'. It has been active since December last year. It is mainly used by hackers to attack targeted targets. Even if a network is hacked, it cannot be easily caught due to unfamiliar application techniques.
Tycoon's main target is various organizations in the field of education and software. It is basically a program written in Java programming language, which is not easy to grasp.
"The attackers are moving towards unusual programming languages and obscure data formats," said Eric Milam, vice president of research and intelligence at BlackBerry. Here the attackers did not have to obscure their code but they succeeded in achieving their goal.
[caption id="attachment_1542" align="alignright" width="300"]
Windows-and-Linux-system-fears-tycoon-choloman-sangbad[/caption]
While tycoon ransomware attacks are not uncommon in the early stages, the first attacks can come from Internet-facing RDP servers. After an attack on the network, the tycoon becomes active, encrypts the PC file, and demands money to decrypt.
Attackers demand payment in bitcoin and continue to raise rates based on communication.
Researchers fear tycoon ransomware may be linked to another ransomware religion or crisis.
Researchers recommend the awareness of network managers, proper management of RDP servers, not using weak passwords and network backups.
According to the technology website Zedinet, BlackBerry researchers discovered the tycoon while working with KPMG's security analysts and detailed it.
Cybercriminals can carry out ransomware attacks on Windows and Linux systems. Seeing its code reference, it has been named 'Tycoon'. It has been active since December last year. It is mainly used by hackers to attack targeted targets. Even if a network is hacked, it cannot be easily caught due to unfamiliar application techniques.
Tycoon's main target is various organizations in the field of education and software. It is basically a program written in Java programming language, which is not easy to grasp.
"The attackers are moving towards unusual programming languages and obscure data formats," said Eric Milam, vice president of research and intelligence at BlackBerry. Here the attackers did not have to obscure their code but they succeeded in achieving their goal.
[caption id="attachment_1542" align="alignright" width="300"]
Windows-and-Linux-system-fears-tycoon-choloman-sangbad[/caption]While tycoon ransomware attacks are not uncommon in the early stages, the first attacks can come from Internet-facing RDP servers. After an attack on the network, the tycoon becomes active, encrypts the PC file, and demands money to decrypt.
Attackers demand payment in bitcoin and continue to raise rates based on communication.
Researchers fear tycoon ransomware may be linked to another ransomware religion or crisis.
Researchers recommend the awareness of network managers, proper management of RDP servers, not using weak passwords and network backups.
Comments
Post a Comment