Continuing with the ransomware discussion with Andrew’s thread.
A new ransomware has been identified:
https://www.zdnet.com/article/thousands-of-servers-infected-with-new-lilocked-lilu-ransomware/
bleepingcomputer.com/news/security/lilocked-ransomware-actively-targeting-servers-and-web-sites/
It appears the ransomware is targeting servers and encrypting the data located on them. All of the known infected servers are web sites. To make the situation worse for the website owners, their site and the encrypted files is Google searchable with the search string: intitle:”index of” “#README.lilocked”
After reading through your articles on the immediate and long term effects of this Lilu ransomware, I am beginning to understand the true scale of this cyber attack. It has also allowed me to grasp an idea of just how many organizations and websites appear to neglect the security of their online assets, and the potential repercussions associated with them. It’s quite unfortunate that the attacked organizations documents and files were leaked through google to the public, potentially harming the privacy of these organizations consumers.