Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

WORM:CRYPTO-RANSOM-CNC2

Severity

Major

Recommended

Yes

Recommended Action

Drop

Category

WORM

Keywords

Cryptolocker Ransomware Download Attempt 2

Release Date

2015/09/08

Update Number

2533

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

WORM: Cryptolocker Ransomware Download Attempt 2


This signature detects Cryptolocker 2.0 Racketeer ransomware being transferred over network. This malware encrypts a user's local files which can only be decrypted after paying a certain ransom amount. A successful infection could leave no local copies of files that users can access without completing the payment.

References

  • URL: https://en.wikipedia.org/wiki/CryptoLocker
  • URL: https://blogs.sophos.com/2015/03/03/anatomy-of-a-ransomware-attack-cryptolocker-cryptowall-and-how-to-stay-safe-infographic/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out