Entries by Calin Ghibu

Ranstop anti-ransomware defends against over-the-network attack by Satana ransomware – Temasoft Lab Demo

Case subject – A Satana variant (Virustotal details) In this scenario, the ransomware attack comes over the network via mapped drives. There are two computers involved: one running the Satana variant, without any protection installed and having a mapped drive to the second computer; the second computer does not run any ransomware code and has […]

Ranstop anti-ransomware protects files against a “RAA” variant – Temasoft Lab Demo

Case subject – A “RAA” variant (JavaScript-based) (Virustotal details) This live ransomware test focuses on a RAA variant to determine how effective TEMASOFT Ranstop is at tackling elusive JavaScript-based ransomware. The RAA ransomware variants have been around since mid-2016, but it still manages to elude a good number of anti-virus engines. It gets delivered to […]

Ranstop protects files against the “.Osiris” variant of Locky – Temasoft Lab Demo

Case subject – A Locky variant nicknamed “.Osiris” (Virustotal details) For this test, the TEMASOFT Research Lab Team let loose one of the latest Locky variants, which features many improvements regarding speed, obfuscation, and strength of the cryptography. The malware uses multiple processes to ensure coverage for as many files as possible and usually gets […]

Ranstop blocks Spora ransomware and restores affected files, while most anti-virus products fail to detect this new ransomware – Temasoft Lab Demo

Case subject – Spora “replacer” ransomware (Virustotal details) For today’s exercise, the Temasoft Research Lab Team focused on a new and intriguing ransomware variant: Spora. This ransomware is interesting because it is what the security community calls a “replacer,” exhibiting a different and more complex behavior than typical ransomware. We have run the malware sample […]

Ranstop blocks ransomware and restores files

Using behavior analysis, TEMASOFT Ranstop blocks most of the current and future ransomware. If anything slips through, it allows recovery of the compromised files without paying ransom. CLUJ NAPOCA, Romania – Jan. 27, 2017 – TEMASOFT announces the Beta release of TEMASOFT Ranstop, a new, innovative product that delivers anti-ransomware technology. TEMASOFT Ranstop uses a behavior analysis engine that can […]

New ransomware attacks databases instead of files in large scale attack

Up until recently, ransomware was targeting document and image files, as they usually hold information that is needed by the victims. Most ransomware families had hard-coded detection of such files for the purpose of rendering them unusable.  Some ransomware families rely on volume encryption and would encrypt everything, after first having disabled the operating system […]