[{"@context":"https:\/\/schema.org\/","@type":"BlogPosting","@id":"https:\/\/www.perthcomputer-repairs.com.au\/security-roundup\/#BlogPosting","mainEntityOfPage":"https:\/\/www.perthcomputer-repairs.com.au\/security-roundup\/","headline":"Security Roundup","name":"Security Roundup","description":"[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”] FluBot malware\u00a0 poses as Flash Player app [\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/Android__malware.avif” alt=”Computer Repairs Flubot Malware” title_text=”Flubot Virus – PC Repairs” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”]FluBot represents a formidable banking malware that cunningly preys on Android phone users, aiming […]","datePublished":"2022-01-11","dateModified":"2024-03-16","author":{"@type":"Person","@id":"https:\/\/www.perthcomputer-repairs.com.au\/author\/admin\/#Person","name":"Digby Saunders","url":"https:\/\/www.perthcomputer-repairs.com.au\/author\/admin\/","identifier":1,"image":{"@type":"ImageObject","@id":"https:\/\/secure.gravatar.com\/avatar\/07f69ae4be0ac9161acc3896df4c60993f6699394abd5e7edc36c3605e1bbbed?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/07f69ae4be0ac9161acc3896df4c60993f6699394abd5e7edc36c3605e1bbbed?s=96&d=mm&r=g","height":96,"width":96}},"publisher":{"@type":"Person","name":"Digby Saunders","image":{"@type":"ImageObject","@id":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2024\/01\/face.jpg","url":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2024\/01\/face.jpg","width":600,"height":60}},"url":"https:\/\/www.perthcomputer-repairs.com.au\/security-roundup\/","about":["Computer Repairs","Computer Security","Internet"],"wordCount":2607,"articleBody":"\t\t\t\t\t[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]FluBot malware\u00a0 poses as Flash Player app[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/Android__malware.avif” alt=”Computer Repairs Flubot Malware” title_text=”Flubot Virus – PC Repairs” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”]FluBot represents a formidable banking malware that cunningly preys on Android phone users, aiming to gain unauthorized access to their banking credentials. This insidious attacker employs a clever strategy of superimposing deceptively genuine-looking login forms onto the interfaces of numerous banking apps globally. By resorting to tactics like smishing (SMS phishing), counterfeit security updates, fake Adobe Flash Players, voicemail memos, and even disguising itself as parcel delivery notifications, FluBot cleverly spreads its malevolent influence. Once it infiltrates your device, this malicious software stealthily pilfers your online banking credentials, intercepts or sends SMS messages (including those containing one-time passwords), and stealthily captures screenshots, all while remaining undetected. To compound matters, FluBot also shamelessly propagates itself by sending smishing messages to all your contacts, putting them at risk as well. It’s worth noting that even your most trusted contacts, be it friends or family, can inadvertently facilitate the spread of this malevolent software. Hence, exercise utmost caution when encountering an unexpected SMS urging you to click on a URL, as it is likely a clever ruse created by FluBot. To fortify the security of your Android device, we strongly advise against installing APK files from unfamiliar sources. Regularly verifying the activation of Google Play Protect and leveraging a reliable mobile security solution from a reputable vendor are further essential precautions you should take. Remain vigilant and fortify yourself against the treacherous grasp of FluBot.[\/et_pb_text][et_pb_text _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]FinalSite ransomware attack shuts down thousands of school websites[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/school-ransomware-chalkboard.avif” alt=”Finalsite Ransomware Computer Repairs” title_text=”PC Repairs – Finalsite Ransomware” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”]FinalSite, the leading provider of website services for schools, recently experienced a ransomware attack that impacted educational institutions worldwide, including those in Australia. With a client base of over 8,000 schools spanning across 115 countries, FinalSite offers comprehensive website design, hosting, and content management solutions for K-12 districts and universities. Unfortunately, this attack caused disruptions for schools trying to access their websites, leaving them with errors or unavailable pages. School IT administrators were left in the dark about when services would be restored, forcing them to inform parents via email. We apologize for any inconvenience caused by this issue. As a result, our website is currently unavailable due to a problem with our service provider. In addition to these website outages, schools were unable to send closure notifications for weather or COVID-19 protocols. Many districts rely on emergency notification systems to inform communities of closures, but this attack hindered their ability to do so. We understand the stress and frustration this has caused for your organizations, and we sincerely apologize for the lengthy outage. Although progress has been made to bring all websites back online, full restoration has taken longer than anticipated, as FinalSite prioritizes a secure and thorough recovery process. We appreciate your patience and continued support during this time.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/padlock.avif” alt=”NightSky Ransomware Computer Repairs” title_text=”PC Repairs – NightSky” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text admin_label=”Text” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]Night Sky is the latest ransomware targeting corporate networksIt’s a new year, and with it comes a new ransomware to keep an eye on called ‘Night Sky’ that targets corporate networks and steals data in double-extortion attacks.One of the victims has received an initial ransom demand of $800,000 to obtain a decryptor and for stolen data not to be published.When launched, the ransomware will encrypt all files except those ending with the .dll or .exe file extensions. The ransomware will also not encrypt files or folders in the list below:AppDataBootWindowsWindows.oldTor BrowserInternet ExplorerGoogleOperaOpera SoftwareMozillaMozilla Firefox$Recycle.BinProgramDataAll Usersautorun.infboot.inibootfont.binbootsect.bakbootmgrbootmgr.efibootmgfw.efidesktop.iniiconcache.dbntldrntuser.datntuser.dat.logntuser.inithumbs.dbProgram FilesProgram Files (x86)#recycleWhen encrypting files, Night Sky will append the\u00a0.nightsky\u00a0extension to encrypted file names, as shown in the image below.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/encrypted-files.avif” alt=”NightSky encrypted files – computer repairs” title_text=”pc repairs – nightsky encrypted files” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]In each folder a ransom note named\u00a0NightSkyReadMe.hta\u00a0contains information related to what was stolen, contact emails, and hard coded credentials to the victim’s negotiation page.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/ransom-note.avif” alt=”NightSky Ransom note – computer repairs” title_text=”pc repairs – NightSky Ransom note” _builder_version=”4.16″ _module_preset=”default” border_radii=”on|5px|5px|5px|5px” border_width_all=”2px” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.23.2″ _module_preset=”default” global_colors_info=”{}”]Instead of using a Tor site to communicate with victims, Night Sky uses email addresses and a clear web website running Rocket.Chat. The credentials are used to log in to the Rocket.Chat URL provided in the ransom note.Double-extortion tacticA common tactic used by ransomware operations is to steal unencrypted data from victims before encrypting devices on the network.The threat actors then use this stolen data in a “double-extortion” strategy, where they threaten to leak the data if a ransom is not paid.To leak victim’s data, Night Sky has created a Tor data leak site that currently includes two victims, one from Bangladesh and another from Japan.Click for more about our Virus Removal Services[\/et_pb_text][et_pb_sidebar _builder_version=”4.23.2″ _module_preset=”default” header_text_color=”#FFFFFF” body_text_color=”#FFFFFF” body_font_size=”14px” body_line_height=”1em” background_color=”#0C71C3″ global_colors_info=”{}”][\/et_pb_sidebar][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ module_id=”review” _builder_version=”4.21.0″ _module_preset=”default” background_color=”rgba(3,55,104,0.57)” global_colors_info=”{}”][et_pb_row _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.18.0″ _module_preset=”default” header_text_color=”#FFFFFF” header_3_text_color=”#FFFFFF” global_colors_info=”{}”]What our Clients Say[\/et_pb_text][et_pb_code _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”]             Posted on Google        Leki Wangdi     Trustindex verifies that the original source of the review is Google. Customer friendly with the great service and fixed within no time.         Posted on Google        Sharon Joby     Trustindex verifies that the original source of the review is Google. I called on Sunday for a last-minute repair on my MacBook Air, and the issue was fixed quickly and efficiently. The setup was at the front of the house and a little cluttered, but the quality of service was excellent. He\u2019s quite loud, but very friendly and professional. The price was very reasonable, especially for short-notice service. I would definitely recommend his work.         Posted on Google        Elke Lunn     Trustindex verifies that the original source of the review is Google. Very happy with the prompt service I received from Rigby. My grandson broke the screen on his laptop, which he urgently needed for school. The screen was replaced within hours. The price was reasonable, and the service was very efficient. Thank you!         Posted on Google        Bernadette McEntee Hart     Trustindex verifies that the original source of the review is Google. Digby\u2019s service was excellent. The problems I was experiencing were solved and then some in good time . He was open to answering all my question with understandable language, not geek talk..         Posted on Google        Jack Baker     Trustindex verifies that the original source of the review is Google. Very quick and professional. Will certainly return next time my compy bricks.         Posted on Google        Bronwyn Mutton     Trustindex verifies that the original source of the review is Google. I'm a happy customer! My HD had failed.Digby found parts and repaired it.He then retrieved precious data and copied to a good HD.Helpful, cheerful and a reasonable price         Posted on Google        Daniel Levis     Trustindex verifies that the original source of the review is Google. Digby is an intelligent and fast working man. Digby went above in helping me with my PC which started as a clean install to windows to rewriting the bios due a virus.Highly recommend.         Posted on Google        Loz Cumber     Trustindex verifies that the original source of the review is Google. Perth Computer Repairs Saved My Business!I have an old CNC machine that runs on Windows XP. When the hard drive failed, I also lost access to the obsolete software that operates the machine. I wasn\u2019t in a financial position to replace the CNC\u2014and even if I was, it would\u2019ve taken at least three months to get a new one.Thankfully, I called Digby. He came to my business promptly, clearly explained the recovery process, and outlined the potential risks. Digby managed to recover the hard drive and got my CNC up and running quickly.Since then, he\u2019s also built me a new computer and is helping with other IT-related needs.Thank you, Digby\u2014your expertise and support have been invaluable!         Posted on Google        Anthony Martin     Trustindex verifies that the original source of the review is Google. Digby helped my son rebuild his  computer, with components purchased. He was excellent in this endeavour and not expensive!               [\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Sektion” module_id=”mail” _builder_version=”4.16″ background_color=”rgba(3,55,104,0.57)” parallax=”on” parallax_method=”off” global_colors_info=”{}”][et_pb_row column_structure=”1_4,1_4,1_2″ admin_label=”Zeile” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”1_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ header_font_size=”36px” background_layout=”dark” border_style=”solid” global_colors_info=”{}”]Contact[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_blurb title=”Address” use_icon=”on” font_icon=”||divi||400″ icon_color=”#ffffff” icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.18.0″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]126\u00a0 Whatley CrescentMaylands[\/et_pb_blurb][et_pb_blurb title=”Phone” use_icon=”on” font_icon=”||divi||400″ icon_color=”#033768″ icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.16″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]0405 119 483 [\/et_pb_blurb][et_pb_blurb title=”Mail” use_icon=”on” font_icon=”||divi||400″ icon_color=”#033768″ icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.16″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]digby@perthcomputer-repairs.com.au[\/et_pb_blurb][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_contact_form use_spam_service=”on” recaptcha_list=”repairs|repairs-0″ recaptcha_min_score=”0.6″ email=”digby@perthcomputer-repairs.com.au” custom_message=”email address is %%email%%.||et_pb_line_break_holder||My message is %%message%%||et_pb_line_break_holder||My Name is %%name%%” submit_button_text=”Send Message” admin_label=”Kontaktformular” _builder_version=”4.16″ _unique_id=”0cb913ed-4e3a-4f44-a9ab-840c0ef299bd” border_radii=”on|0px|0px|0px|0px” border_style=”solid” input_border_radius=”0″ global_colors_info=”{}”][et_pb_contact_field field_id=”Name” field_title=”Name” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][et_pb_contact_field field_id=”Email” field_title=”Email Address” field_type=”email” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][et_pb_contact_field field_id=”Message” field_title=”Message” field_type=”text” fullwidth_field=”on” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][\/et_pb_contact_form][\/et_pb_column][\/et_pb_row][\/et_pb_section]\t\t\t\t"},{"@context":"https:\/\/schema.org\/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Security Roundup","item":"https:\/\/www.perthcomputer-repairs.com.au\/security-roundup\/#breadcrumbitem"}]}]