Hardware/Network
Wizard Spider Upgrades Ryuk Ransomware to Reach Deep into LANs
Reported by threatpost.com
Wake-on-LAN and ARP pinging have expanded Ryuk’s reach into corporate LANs — and its operators’ monetization abilities.The Ryuk ransomware has added two features to enhance its effectiveness: The ability to target systems that are in “standby” or sleep mode; and the use of Address Resolution Protocol (ARP) pinging to find drives on a company’s LAN. Both are employed after the initial network compromise of a victim organization.