<p>
The Central government has issued a &lsquo;Virus Alert&rsquo; via The Indian Computer Emergency Response Team (CERT-In) as a new type of ransomware has been found spreading through email.</p>
<p>
The ransomware is targeting Windows computers and once the payload is delivered it locks the PC remotely and asks for money from the user to open it again.</p>
<p>
CERT-In in its latest advisory warned about the ransomware called Diavol. According to the advisory, the ransomware is compiled with Microsoft Visual C/C++ Compiler. &ldquo;It is encrypting files using user-mode Asynchronous Procedure Calls (APCs) with an asymmetric encryption algorithm,&rdquo; it said.</p>
<p>
According to CERT-In, the Diavol malware has been spreading via email, which includes a link to OneDrive. The OneDrive link directs the user to download a zipped file which includes an ISO file containing a LNK file and a DLL. Once opened on the users system, the LNK file masqueraded as a Document entices the user to click/open it. Once the user executes the LNK file, the malware infection will be initiated.</p>
<p>
<strong>Diavol damage</strong></p>
<p>
After the Diavol malware infects a PC, it carries out pre-processing on the victim system including registering the victim device with a remote server, terminating running processes, finding local drives and files in the system to encrypt, and preventing recovery by deleting shadow copies. Then, the files are locked and desktop wallpaper is changed with a ransom message.</p>
<p>
When executing on a compromised machine, the ransomware extracts the code from the images&rsquo; PE resource section and loads it within a buffer with execution permissions, according to CERT-In</p>
<p>
<strong>How to stay safe from Diavol</strong></p>
<p>
In order to stay safe from this ransomware it is crucial that users update software and operating systems with the latest patches. Scan all incoming and outgoing emails to detect threats and filter executable files from reaching end users.</p>
<p>
Other methods include, network segmentation and segregation into security zones – help protect sensitive information and critical services. Separate administrative network from business processes with physical controls and Virtual Local Area Networks.</p>
The National Human Rights Commission of India strives to build partnerships and work together to…
In the wake of the growing intervention of Chinese authorities in Balochistan, the President of…
Indian High Commissioner to Australia, Gopal Baglay on Monday called on the Australian Foreign Minister,…
The 4th Session of the India-Ghana Joint Trade Committee (JTC) concluded in Accra, with both…
In a swift and coordinated sea-air operation, the Indian Coast Guard intercepted and detained an…
The United Nations Assistance Mission in Afghanistan (UNAMA) reports that a staggering 23.7 million people…