{"id":718,"date":"2019-10-06T06:00:37","date_gmt":"2019-10-06T04:00:37","guid":{"rendered":"https:\/\/www.mosi.at\/ikt\/?p=718"},"modified":"2019-10-25T22:24:07","modified_gmt":"2019-10-25T20:24:07","slug":"ryuk-trojaner","status":"publish","type":"post","link":"https:\/\/www.mosi.at\/ikt\/2019\/10\/06\/ryuk-trojaner\/","title":{"rendered":"RYUK Trojaner"},"content":{"rendered":"\n

RYUK <\/strong>ist eine Schadsoftware, die lokale Dateien und Netzlaufwerksdaten verschl\u00fcsselt. Sie wird durch \u00f6ffnen eines Mircosoft Word Dokuments als E-Mail Anhang aktiviert. Dabei wird von einem vermeintlich <\/strong>bekanntem Empf\u00e4nger auf eine selbst erstellte E-Mail geantwortet. <\/p>\n\n\n\n

Erst bei genauer Kontolle der E-Mailadresse wird ersichtlich, dass der Absender unbekannter Herkunft ist, da der Domainname merkw\u00fcrdig ist.<\/p>\n\n\n\n

EU und staatliche Stellen:<\/strong>
Bundeskriminalamt Cybercrime-Competence-Center C4<\/a>
bsi f\u00fcr B\u00fcrger: Aktuelle Informationen zu emotet\/RYUK<\/a>
nomoreransom.org<\/a> <\/p>\n\n\n\n

Medien:<\/strong>
2019\/01\/14 der Standard<\/a>
2019\/01\/16 Spiegel<\/a> <\/p>\n\n\n\n

Fachzeitschriften:<\/strong>
2018\/08\/08 zdnet.de<\/a>
2018\/08\/22 silicon.de<\/a>
2019\/06\/06 heise.de<\/a>
2019\/10\/05 chip.de<\/a>
<\/p>\n\n\n\n

Anti-Schadsoftware:<\/strong>
avira virus-lab<\/a>
checkpoint<\/a>
malwarebytes<\/a>
oo-software<\/a>
sophos<\/a>
symantec<\/a>
trendmicro<\/a> <\/p>\n\n\n\n

Decryptoren:<\/strong>
Bundeskriminalamt Ransomware: Entschl\u00fcsselungs-Tool<\/a>
nomoreransom.org<\/a>
bleib-virenfrei.de Ransomwareliste<\/a>
bugsfighter<\/a>
Emsisoft Decryptor<\/a> Update:2019\/10\/25
kaspersky<\/a>
mcafee<\/a>
myspybot<\/a>
2-spyware<\/a>
trendmicro<\/a>
<\/p>\n\n\n\n

L\u00f6sungsanbieter zu RYRUK:<\/strong>
hornetsecurity.com ransomware-ryuk<\/a>
hornetsecurity.com<\/a>
sievers-group.com<\/a>
crowdstrike.com<\/a>
<\/p>\n\n\n\n

Links zu Ransome:<\/strong>
WBUR-FM<\/a>
<\/p>\n","protected":false},"excerpt":{"rendered":"

RYUK ist eine Schadsoftware, die lokale Dateien und Netzlaufwerksdaten verschl\u00fcsselt. Sie wird durch \u00f6ffnen eines Mircosoft Word Dokuments als E-Mail Anhang aktiviert. Dabei wird von einem vermeintlich bekanntem Empf\u00e4nger auf eine selbst erstellte E-Mail geantwortet. Erst bei genauer Kontolle der E-Mailadresse wird ersichtlich, dass der Absender unbekannter Herkunft ist, da der Domainname merkw\u00fcrdig ist. EU […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_front_end_style_editor":"no","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"0","ocean_second_sidebar":"0","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"0","ocean_custom_header_template":"0","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"0","ocean_menu_typo_font_family":"0","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"0","osp_disable_panel":"default","osh_disable_topbar_sticky":"default","osh_disable_header_sticky":"default","osh_sticky_header_style":"default","osh_sticky_header_effect":"","osh_custom_sticky_logo":0,"osh_custom_retina_sticky_logo":0,"osh_custom_sticky_logo_height":0,"osh_background_color":"","osh_links_color":"","osh_links_hover_color":"","osh_links_active_color":"","osh_links_bg_color":"","osh_links_hover_bg_color":"","osh_links_active_bg_color":"","osh_menu_social_links_color":"","osh_menu_social_hover_links_color":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"off","ocean_gallery_id":[],"footnotes":""},"categories":[9,42,44,10,43,16],"tags":[],"class_list":["post-718","post","type-post","status-publish","format-standard","hentry","category-__news","category-schadsoftware","category-security","category-software","category-trojaner","category-windows","entry"],"_links":{"self":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/comments?post=718"}],"version-history":[{"count":0,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/718\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/media?parent=718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/categories?post=718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/tags?post=718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}