We've had several user at my company get hit with this over the last week or so. Nasty stuff, and thanks to their latest iteration it's easier to get, and essentially impossible to get your files back...unless you pay up.
http://www.infosecurity-magazine.com/ne ... exposed-3/“Using Adobe Flash, the malvertisements silently ‘pull in’ malicious exploits from the FlashPack Exploit Kit. The exploits attack a vulnerability in the end-users’ browser and install CryptoWall 2.0 on end-users’ computers,” the post continued.
“Similar to the behavior of other ransomware, CryptoWall then encrypts the end-users’ hard drive and will not allow access until the victim pays a fee over the internet for the decryption key. Typically, the end-users face an escalating time deadline; failure to pay by the deadline results in their hard drives being permanently encrypted, thus rendered effectively useless, with all information inaccessible.”
Big name sites affected included Yahoo Finance, Fantasy and Sports; AOL; The Atlantic; The Age; Time Out US; and the Sydney Morning Herald.
