Comments on: Ransom-based malware attacks specific companies

Low ransom request and a self-termination date on the code suggest this is a test attack.

[qwerty75]

Maybe this is necessary

In order to get companies and organizations to take security seriously.

Too many think that throwing security features at a network will save them.

Too many do not train ALL their employees in proper security practices, and enforce the rules.

And way too many think they are too small and insignificant to attract attention, so don't use anything more then the most rudimentary security practices, at best. These organizations get burned as often as the big boys.

I am not saying that this sort of thing is a positive thing, or that the attackers are acting in any sort of benevolent manner. But companies are always short-sighted and only look at profits today, they don't see the big picture especially if it is not a direct revenue generator.

They need to be hurt financially before they will take it seriously. It was the same way 100 years ago with low wages and low safety standards. They had to get hurt before they took proper moral and ethical actions. Businessman are the only subspecies of humans that never evolve.

[zboot]

Or maybe it is not

Perhaps the company is too poor to afford full fledged security measures. Maybe they're too busy trying to survive to waste time teaching the guy who is chief engineer/receptionist/janitor/salesperson how to avoid unintentionally leaking information to corporate spies. Perhaps they don't have any IT friends who are willing to work for free. Maybe they believe one shouldn't need to be uber huge, have oodles of technical competence, or some other thing that I'm not typing - in order to compete online.