Ramsonware installs Gigabyte driver to bypass antivirus

[Portada HL]

This is a new technique for hijacking files. It involves installing a vulnerable Gigabyte driver to encrypt files without anything being able to interrupt the process.

View entry

[msxmakers]

well, it doesn't seem like they're saying what the most immediate solution is!

[Gallina]

I very much doubt that this can be resolved in instances below the operating system. I would expect the solution to come from a Windows update.

[_Neptunno_]

I hate the problems of ramsonware....it's one of the most disgusting things I encounter in my work The best way to prevent this is to have backups, several ones and of course not to leave them connected to the computer constantly.
Even if you schedule backup scripts to mount and unmount the drive, you can avoid problems.

Regards!!

[krampak]

@_Neptunno_ said in Ramsonware installs Gigabyte driver to bypass antivirus:

I hate ransomware problems....it's one of the most disgusting things I encounter in my work The best way to prevent this is to have backups, several ones, and of course not to leave them connected to the computer constantly.
Even if you schedule backup scripts to mount and unmount the drive, you can avoid problems.

Best regards!!

Same here... it gives me diarrhea when I find a data server with all the files renamed...