XPlugNethood – used to enumerate network resources and set TCP connections. XPlugProcess – used to enumerate processes, get process information, and terminate processes. XPlugRegedit – used to enumerate, create, delete, and modify registry entries and values.

XPlugDisk – used to copy, move, rename, execute and delete files. PlugX contains backdoor modules to perform the following tasks: The attack starts with a phishing email containing a malicious attachment, usually, a specially crafted malicious document and exploits a vulnerability in either Adobe Acrobat Reader or Microsoft word. It primarily targets government entities, targets specific businesses and organizations and it spreads via phishing emails, spam campaigns, and spear-phishing campaigns. Plug X malware is a Remote Access Trojan (RAT) which is also known as “Korplug” and it was first discovered in 2012. The new dangerous ransomware strains include DoppelPaymer and Bitpaymer by Evil Corp, and can be removed by Cyber Vaccines.

LIFARS proactive cyber services such as comprehensive gap assessment, red-teaming, penetration testing, remote threat hunting and vulnerability assessment reveal a company’s vulnerabilities. Also, it is always a great idea to always back your files up. There are many ways to avoid the CryptoLocker virus such as by updating antivirus software and malware protection, ignoring suspicious attachments or files, and by not clicking on random or unrecognized links. In February, the FBI offered a cool $3 million reward for Bogachev. In June 2014, Operation Tovar took down Evgeniy Bogachev, the leader of the gang of hackers behind CryptoLocker. Once theįiles are infected, the files are effectively lost forever. To decrypt the file, a person/victim should have a private key to decrypt the file. A Victim has to pay a certain amount through bitcoin in exchange for being able to access the file or documents. The virus is a dangerous form of ransomware that encrypts files on the computer. CryptoLocker.ĬryptoLocker Ransomware was released in September 2013 and it spread through email attachments and encrypted the user’s files so that they couldn’t access them. Top Destructive Cyber Viruses and How to Avoid Them.

Crypto locker worm