Sonatype shines light on typosquatting ransomware threat in PyPI
package, researchers found scripts that would stomp over Windows user's folders and begin encrypting files. A successful run then results in a pop-up appearing on the user's screen which is where things get a bit odd.
The infected user is instructed to join the author's Discord server where an automatically generated message reveals the decryption keys to unlock files. No payment needed. So, good news and bad news. Sonatype managed to get hold of the developer responsible, who insisted the packages were merely developed for fun and, since no ransom was demanded or paid, were pretty much harmless.
Hmm, we're not so sure anyone experiencing the heart-stopping moment arising from a message warning their files are encrypted would agree. More worryingly, the developer also told Sonatype it was pretty easy to create the exploit, which relies on some careless keyboard bashing on the part of the end user.package was renamed by the author, according to Sonatype,"in an effort to prevent further typosquatting victims falling for the ransomware, effectively thwarting the attack.
Ireland Latest News, Ireland Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
“I’m a fashion editor and these are my tips for smart hand luggage packing”As we gear up for the final month of summer, it’s time to talk packing. But ditch those who preach about packing light; it’s all about packing smart.
Read more »
Teenager thrown off stolen motorbike after hitting large potholeHe dodged red lights and broke the speed limit
Read more »
Herta expects tougher pole battle in Nashville’s second yearLast year’s Nashville pole-winner Colton Herta predicts it will be a much harder battle for preeminence in qualifying in 2022 – but is still expecting Andretti Autosport-Honda to shine.
Read more »
Knights in shining armour launch Project Yorkshire crusadeMEET Yorkshire's new knights in shining armour - film-makers ScottandSid launch crusade to promote God's Own Country Everymancinema Leeds premiere of SeanBean narrated ProjectYorks APlaygroundLikeNoOther - GW1962 story and watch the film at ad
Read more »
SpaceX upgrades Starlink to reflect less light but no launchSpaceX upgrades Starlink to reflect less light, can't launch without its Starship
Read more »
Meghan struggled in wedding dress 'after she was rude' to aideAuthor claims that the actress was rude in new book
Read more »