fechar
fechar
Sua Rede do Amanhã
Sua Rede do Amanhã
Planeje seu caminho rumo a uma rede mais rápida, segura e resiliente projetada para os aplicativos e usuários aos quais você oferece suporte.
          Experimente a Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            A Netskope estreia como líder no Quadrante Mágico™ do Gartner® para Single-Vendor SASE
              Protegendo a IA generativa para leigos
              Protegendo a IA generativa para leigos
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                Prevenção Contra Perda de Dados (DLP) Moderna para Leigos
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Livro SD-WAN moderno para SASE Dummies
                  Modern SD-WAN for SASE Dummies
                  Pare de brincar com sua arquitetura de rede
                    Compreendendo onde estão os riscos
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                            Netskope GovCloud
                            Netskope obtém alta autorização do FedRAMP
                            Escolha o Netskope GovCloud para acelerar a transformação de sua agência.
                              Let's Do Great Things Together
                              A estratégia de comercialização da Netskope, focada em Parcerias, permite que nossos Parceiros maximizem seu crescimento e lucratividade enquanto transformam a segurança corporativa.
                                Netskope solutions
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Suporte Técnico Netskope
                                  Suporte Técnico Netskope
                                  Nossos engenheiros de suporte qualificados estão localizados em todo o mundo e têm diversas experiências em segurança de nuvem, rede, virtualização, fornecimento de conteúdo e desenvolvimento de software, garantindo assistência técnica de qualidade e em tempo hábil.
                                    Vídeo da Netskope
                                    Treinamento Netskope
                                    Os treinamentos da Netskope vão ajudar você a ser um especialista em segurança na nuvem. Conte conosco para ajudá-lo a proteger a sua jornada de transformação digital e aproveitar ao máximo as suas aplicações na nuvem, na web e privadas.

                                      Virlock’s resurgence poses bigger threat to file syncing over the cloud

                                      Jan 30 2017
                                      Tags
                                      CASB
                                      Cloud Best Practices
                                      Cloud Fanout
                                      Cloud Malware
                                      Netskope Threat Protection
                                      Netskope Threat Research Labs
                                      Ransomware
                                      Tools and Tips
                                      Virlock
                                      Vulnerability Advisory

                                      A new variant of the Virlock family of wormed ransomware has been detected actively propagating in the wild. Virlock not only encrypts every file in a file system, but infects them simultaneously. This converts each file into a potential infection root for branching out once it is shared over the network or through physical media. Netskope Threat Research Labs published a detailed blog on how the Virlock infection works in two harmful ways: by encapsulating the capabilities of both ransomware and a worm.

                                      Such infection vectors possess a bigger threat to an enterprise environment where cloud storage services are used for collaboration. Any infected user within the collaboration group can transfer the infection to other machines once the service syncs the file across all of the users in the group. This gives rise to the classic malware fan-out effect wherein cloud services inadvertently amplify the threat landscape.

                                      Netskope Threat Protection blocks all known variants of Virlock with the detection name of PE.Gn.5 and PE.Gn.8. The Virlock file infectors can be blocked from syncing to the cloud, both from the original infected user and also from the cases where Virlock might be syncing from the cloud to a new user in the same collaboration group, as shown in Figure 1.

                                      Figure 1: Netskope Threat Protection preventing Virlock infection fan-out.

                                      Netskope recommends the following best practices to enterprises in order to protect from ransomware threats:

                                      1. Detect and remediate all threats at rest in sanctioned cloud services using a threat-aware cloud access security broker (CASB) like Netskope.
                                      2. Detect and remediate all threats being downloaded from unsanctioned cloud services using a threat-aware cloud access security broker (CASB) like Netskope.
                                      3. Regularly back up and turn on versioning for critical content in cloud services.
                                      4. On managed devices, administrators should enable the option to view known file extensions.
                                      5. Administrators should advise their users to avoid executing any files with dual extensions unless they are very sure that the files are benign.
                                      6. Administrators should warn users to avoid opening untrusted attachments, regardless of those attachments’ extensions or file names
                                      7. Enterprise users should always keep their systems and antivirus updated with the latest releases and patches.

                                      The post Virlock’s resurgence poses bigger threat to file syncing over the cloud appeared first on Netskope.

                                      Mantenha-se informado!

                                      Assine para receber as últimas novidades do Blog da Netskope