{"id":587,"date":"2020-05-22T15:12:10","date_gmt":"2020-05-22T15:12:10","guid":{"rendered":"https:\/\/www.estescloud.com\/?p=587"},"modified":"2020-05-22T15:12:10","modified_gmt":"2020-05-22T15:12:10","slug":"ransomware-in-a-vm","status":"publish","type":"post","link":"https:\/\/www.estescloud.com\/ransomware-in-a-vm","title":{"rendered":"Ransomware in a VM?!"},"content":{"rendered":"\n<p>Saw the craziest news article on <a rel=\"noreferrer noopener\" href=\"https:\/\/www.zdnet.com\/article\/ransomware-deploys-virtual-machines-to-hide-itself-from-antivirus-software\/\" target=\"_blank\">ZDnet<\/a> yesterday.  Apparently ransomware is now installing a virtual machine INSIDE the hacked computer in order to avoid detection.  We&#8217;ve entered a new phase of devious behavior!<\/p>\n\n\n\n<p>Please make sure your users are safe &#8211; I really think the only way to avoid all this is to adopt a Zero Trust attitude.  <\/p>\n\n\n\n<p>Think of it this way &#8211; do you let a technician into your home to work on the AC unit, just because they have the right shirt on?  Did you call them? Are they &#8216;safe&#8217;?  Do they take their shoes off and keep their N95 mask on? Some of us will allow them in, some will not.<\/p>\n\n\n\n<p>At this time, I have immune compromised folks at home, and that technician isn&#8217;t coming in. I&#8217;ll live with a busted AC unit for now, it&#8217;s not worth the risk.<\/p>\n\n\n\n<p>Is your PC worth the risk to allow untrusted software in and run whatever, wherever it wants, with whatever bugs it brings with it?  I think not.<\/p>\n\n\n\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-estesgroup\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"37a7KxgSWZ\"><a href=\"https:\/\/www.estesgrp.com\/endpointsecurity\/\">EstesCloud EndPoint Security<\/a><\/blockquote><iframe title=\"&#8220;EstesCloud EndPoint Security&#8221; &#8212; EstesGroup\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" src=\"https:\/\/www.estesgrp.com\/endpointsecurity\/embed\/#?secret=37a7KxgSWZ\" data-secret=\"37a7KxgSWZ\" width=\"580\" height=\"327\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><figcaption>Solve your PC security problems<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Saw the craziest news article on ZDnet yesterday. Apparently ransomware is now installing a virtual machine INSIDE the hacked computer in order to avoid detection. We&#8217;ve entered a new phase of devious behavior! Please make sure your users are safe &#8211; I really think the only way to avoid all this is to adopt a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[40,39],"tags":[],"_links":{"self":[{"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/posts\/587"}],"collection":[{"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/comments?post=587"}],"version-history":[{"count":0,"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/posts\/587\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/media?parent=587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/categories?post=587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.estescloud.com\/wp-json\/wp\/v2\/tags?post=587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}