Ransomware Now Gunning for Your Web Sites
Summary: A ransomware strain dubbed Linux.Encoder.1 by Dr.Web targets Linux-based Web sites, encrypting files in home directories, backup directories and system folders after being injected through known vulnerabilities in site plugins or third-party software such as shopping cart programs. One victim, Web designer Daniel Macadar, paid 1 bitcoin (about $420) after the malware hit a development server hosting sites for two friends, and the decryption script altered characters in some files.
What you should know: Macadar's server was infected through an unpatched Magento vulnerability that CheckPoint detailed in April 2015 and Magento fixed, yet he was behind on backups and had no choice but to pay. The FBI logged 992 CryptoWall complaints and more than $18 million in losses in the year before June, a figure drawn only from victims who reported.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026