{"id":73631,"date":"2023-07-16T13:45:33","date_gmt":"2023-07-16T17:45:33","guid":{"rendered":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631"},"modified":"2023-07-16T13:45:33","modified_gmt":"2023-07-16T17:45:33","slug":"watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates","status":"publish","type":"post","link":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631","title":{"rendered":"Watch out for this new malicious ransomware disguised as Windows updates"},"content":{"rendered":"
\n

Is that really a Windows update<\/a> you are about to click on? Or ransomware in disguise? As first documented by Fortinet FortiGuard Labs and followed up by Trend Micro, new ransomware is currently on the rise and disguising itself as fake Windows updates and Word installers as part of a malvertising campaign. Also, multiple variants of this ransomware have been discovered.\u00a0<\/p>\n

Here’s what we know so far and what you can do to protect yourself.<\/p>\n

CLICK TO GET KURT\u2019S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK TIPS, TECH REVIEWS AND EASY HOW-TO\u2019S TO MAKE YOU SMARTER<\/strong><\/a><\/p>\n

The ransomware, which is called\u00a0Big Head<\/a>, infects devices and encrypts the device’s files by displaying a fake Windows update alert on the victim’s computer. Three encrypted executable files\u00a0are deployed in the attack \u2013 one for propagating the malware, one for facilitating communications via Telegram, and one for encrypting the files and displaying the fake Windows update.\u00a0<\/p>\n

If a person clicks on this fake Windows update alert, Big Head will begin its attack by deleting backups, checking the virtualized environment, disabling the computer’s Task Manager to prevent the user from deleting it, and more.<\/p>\n

There have also been variants discovered of the Big Head ransomware that are capable of stealing web browser history, directory lists, running processes, product keys and network information. Most of the samples of this ransomware have been submitted from the U.S., France, Turkey and Spain.<\/a><\/p>\n

RUSSIAN RANSOMWARE ATTACK SOFTWARE TARGETS APPLE MAC AND MACBOOK<\/strong><\/a><\/p>\n

Ransomware criminals will try to get you to pay money to them to get your files back. However, paying the ransom does not guarantee that you will regain access to anything a criminal takes from you and will only permit them to do it more.<\/p>\n

Your best bet is to prevent an attacker from gaining access to your files altogether so that you don’t have to try to fight to get them back. Here are some of my tips for avoiding having your files stolen in a ransomware attack.<\/p>\n

If you receive an email from an address you do not recognize, don\u2019t open it. If you open it by mistake, avoid clicking any links or opening any attachments within the email. This is a classic method that cybercriminals use to try to trick you into thinking that the message is from someone important.<\/p>\n

HOW TO BACK UP YOUR MAC COMPUTER<\/strong><\/a><\/p>\n

Keeping hackers out of your devices can be prevented if you have good antivirus software installed. Having antivirus software on your devices will make sure you are stopped from clicking on any potential malicious links which may install malware or ransomware on your devices,<\/a> allowing hackers to gain access to your personal information. Plus, it’s designed to tell you when there is already malware on your device so that you can immediately work toward getting rid of it.\u00a0<\/p>\n

See my expert review of the best antivirus protection<\/strong> for your Windows, Mac, Android and iOS devices\u00a0<\/strong>by visiting\u00a0Cyberguy.com\/LockUpYourTech<\/a><\/p>\n

I highly advise you to create backups of your information on an external hard drive and store it securely in a safe location. This process involves regularly making backup copies and then disconnecting the external drive from your computer<\/a> for added safety. You should store the disconnected drive in a secure place like a fireproof safe or a safety deposit box. By keeping the drive unplugged when not in use, you significantly minimize the risk of unauthorized access to your data by hackers.<\/p>\n

To learn more about the great devices you can use to back up your important files, visit\u00a0Cyberguy.com\/BackUpDevices<\/u><\/strong><\/a><\/p>\n

HOW TO BACKUP YOUR WINDOWS COMPUTER<\/strong><\/a><\/p>\n

The great thing about cloud storage is how flexible it is. If you ever need extra storage room, you can get it right away (though it does come with a price tag). However, there’s a major downside to consider: you can’t be sure who has access to your stored data. Just so you know, the term “cloud” is more of a metaphorical concept. Your data resides on servers owned by someone else, leaving it potentially vulnerable to hackers, snoopers and other unscrupulous individuals.<\/p>\n

To learn more about the best cloud services<\/strong> you can use to back up your important files, visit Cyberguy.com\/BackupDevices<\/u><\/strong><\/a><\/p>\n

Regularly update your operating system, antivirus software, web browsers and other applications to ensure you have the latest security patches<\/a> and protections.<\/p>\n

Attacks like these are scary, especially when the attacker is disguising themselves as a legitimate company like Microsoft.<\/a> This is why you have to be extremely careful before you click on any links or open any attachments that are sent to you out of the blue. Make sure you follow my tips, and don’t be so quick to judge everything that you see right away.<\/p>\n

CLICK TO GET THE FOX NEWS APP<\/u><\/strong><\/a><\/p>\n

Copyright 2023 CyberGuy.com. All rights reserved.<\/i><\/p>\n<\/div>\n

Source – https:\/\/www.foxnews.com\/tech\/watch-out-new-malicious-ransomware-disguised-windows-updates <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Is that really a Windows update you are about to click on? Or ransomware in disguise? As first documented by Fortinet FortiGuard Labs and followed […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"twitter_2902945987_2902945987":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[16563],"tags":[],"stock_ticker":[],"class_list":["post-73631","post","type-post","status-publish","format-standard","hentry","category-market-news","entry"],"acf":[],"yoast_head":"\nWatch out for this new malicious ransomware disguised as Windows updates - Wall Street PR<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Watch out for this new malicious ransomware disguised as Windows updates - Wall Street PR\" \/>\n<meta property=\"og:description\" content=\"Is that really a Windows update you are about to click on? Or ransomware in disguise? As first documented by Fortinet FortiGuard Labs and followed […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\" \/>\n<meta property=\"og:site_name\" content=\"Wall Street PR\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/WallStreetPR\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-16T17:45:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2021\/06\/businessman-showing-business-evolution1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"715\" \/>\n\t<meta property=\"og:image:height\" content=\"423\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#article\",\"isPartOf\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/6e00efa2abc413bdc0bca51a90c54d36\"},\"headline\":\"Watch out for this new malicious ransomware disguised as Windows updates\",\"datePublished\":\"2023-07-16T17:45:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\"},\"wordCount\":830,\"publisher\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#organization\"},\"articleSection\":[\"Market News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\",\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\",\"name\":\"Watch out for this new malicious ransomware disguised as Windows updates - Wall Street PR\",\"isPartOf\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#website\"},\"datePublished\":\"2023-07-16T17:45:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cablemanpro.com\/wallstreetpr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Watch out for this new malicious ransomware disguised as Windows updates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#website\",\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/\",\"name\":\"Wall Street PR\",\"description\":\"Latest News From WallStreet\",\"publisher\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cablemanpro.com\/wallstreetpr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#organization\",\"name\":\"Wall Street PR\",\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2019\/10\/brand-logo.png\",\"contentUrl\":\"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2019\/10\/brand-logo.png\",\"width\":537,\"height\":70,\"caption\":\"Wall Street PR\"},\"image\":{\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/WallStreetPR\/\",\"https:\/\/x.com\/WallstreetPRs\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/6e00efa2abc413bdc0bca51a90c54d36\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2022\/09\/360_F_336393115_5gCUfwn76x3MJaCJMYDKLoRebkC8QyrL-300x300.jpg\",\"contentUrl\":\"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2022\/09\/360_F_336393115_5gCUfwn76x3MJaCJMYDKLoRebkC8QyrL-300x300.jpg\",\"caption\":\"admin\"},\"url\":\"https:\/\/cablemanpro.com\/wallstreetpr\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Watch out for this new malicious ransomware disguised as Windows updates - Wall Street PR","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631","og_locale":"en_US","og_type":"article","og_title":"Watch out for this new malicious ransomware disguised as Windows updates - Wall Street PR","og_description":"Is that really a Windows update you are about to click on? Or ransomware in disguise? As first documented by Fortinet FortiGuard Labs and followed […]","og_url":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631","og_site_name":"Wall Street PR","article_publisher":"https:\/\/www.facebook.com\/WallStreetPR\/","article_published_time":"2023-07-16T17:45:33+00:00","og_image":[{"width":715,"height":423,"url":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2021\/06\/businessman-showing-business-evolution1.jpg","type":"image\/jpeg"}],"author":"admin","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#article","isPartOf":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631"},"author":{"name":"admin","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/6e00efa2abc413bdc0bca51a90c54d36"},"headline":"Watch out for this new malicious ransomware disguised as Windows updates","datePublished":"2023-07-16T17:45:33+00:00","mainEntityOfPage":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631"},"wordCount":830,"publisher":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#organization"},"articleSection":["Market News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631","url":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631","name":"Watch out for this new malicious ransomware disguised as Windows updates - Wall Street PR","isPartOf":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#website"},"datePublished":"2023-07-16T17:45:33+00:00","breadcrumb":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/watch-out-for-this-new-malicious-ransomware-disguised-as-windows-updates-73631#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cablemanpro.com\/wallstreetpr\/"},{"@type":"ListItem","position":2,"name":"Watch out for this new malicious ransomware disguised as Windows updates"}]},{"@type":"WebSite","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#website","url":"https:\/\/cablemanpro.com\/wallstreetpr\/","name":"Wall Street PR","description":"Latest News From WallStreet","publisher":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cablemanpro.com\/wallstreetpr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#organization","name":"Wall Street PR","url":"https:\/\/cablemanpro.com\/wallstreetpr\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/logo\/image\/","url":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2019\/10\/brand-logo.png","contentUrl":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2019\/10\/brand-logo.png","width":537,"height":70,"caption":"Wall Street PR"},"image":{"@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/WallStreetPR\/","https:\/\/x.com\/WallstreetPRs"]},{"@type":"Person","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/6e00efa2abc413bdc0bca51a90c54d36","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cablemanpro.com\/wallstreetpr\/#\/schema\/person\/image\/","url":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2022\/09\/360_F_336393115_5gCUfwn76x3MJaCJMYDKLoRebkC8QyrL-300x300.jpg","contentUrl":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-content\/uploads\/2022\/09\/360_F_336393115_5gCUfwn76x3MJaCJMYDKLoRebkC8QyrL-300x300.jpg","caption":"admin"},"url":"https:\/\/cablemanpro.com\/wallstreetpr\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/posts\/73631","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/comments?post=73631"}],"version-history":[{"count":0,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/posts\/73631\/revisions"}],"wp:attachment":[{"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/media?parent=73631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/categories?post=73631"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/tags?post=73631"},{"taxonomy":"stock_ticker","embeddable":true,"href":"https:\/\/cablemanpro.com\/wallstreetpr\/wp-json\/wp\/v2\/stock_ticker?post=73631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}