{"id":9314,"date":"2015-07-14T11:12:37","date_gmt":"2015-07-14T15:12:37","guid":{"rendered":"https:\/\/www.kaspersky.co.za\/blog\/?p=9314"},"modified":"2020-02-26T18:55:09","modified_gmt":"2020-02-26T16:55:09","slug":"teslacrypt-20-ransomware","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.za\/blog\/teslacrypt-20-ransomware\/9314\/","title":{"rendered":"TeslaCrypt 2.0 ransomware: stronger and more dangerous"},"content":{"rendered":"

Cybercriminals are learning from each other. Take TeslaCrypt, for example. It is a relatively new family of ransomware; its samples were first detected in February 2015. The notable feature of the early TeslaCrypt versions was that malware was targeting not only usual sets of files, including documents, pictures and videos, but games-related file types as well<\/a>. By that time, it was a rather weak malware due to a couple of its technical flaws.<\/p>\n

\"TeslaCrypt<\/a><\/p>\n

Despite the fact malware creators scared their victims with the frightful RSA-2048 algorithm, in reality the encryption was not that strong. Moreover, during the encryption process the malware stored encryption keys in a file on the victim\u2019s computer hard drive, making it possible to save the key by interrupting the encryptor\u2019s operation, or to extract the key before the respective area of the disk was overwritten.<\/p>\n

But, as was mentioned above, criminals are learning. In the latest TeslaCrypt 2.0 version, which was recently discovered by Kaspersky Lab researchers<\/a>, malware creators have implemented some new features preventing decryption of stolen files and discovery of malware\u2019s command&control servers.<\/p>\n

\n

The best line of #defense<\/a> against any #ransomware<\/a> is to have backed up your machines yesterday. https:\/\/t.co\/cpcBqX1Qy2<\/a><\/p>\n

\u2014 Kaspersky (@kaspersky) January 30, 2015<\/a><\/p><\/blockquote>\n