Sebastiano

Help ! PC infected by Phobos Banjo Extension

Recommended Posts

Hey, 

I just got infected and seek help too.. Was your server running linux? 

Trying to find how I got infected too.

Share this post


Link to post
Share on other sites

There's currently no decrypter for Phobos.

Out of curiosity, were the files that were encrypted accessible via FTP or Windows Networking? It seems strange for both a Linux and Windows server to get hit by the same ransomware.

Share this post


Link to post
Share on other sites
16 minutes ago, GT500 said:

Linux and Windows

Extortionists have long mastered this trick and use it.

Share this post


Link to post
Share on other sites

Found nothing yet.

5 hours ago, Amigo-A said:

Extortionists have long mastered this trick and use it.

you mean they can run windows virus on the linux server? 

Share this post


Link to post
Share on other sites
18 hours ago, Koul said:

you mean they can run windows virus on the linux server?

There are certain things that can run on multiple platforms. Java, Python, .NET via Mono, etc. They may also write shell scripts for Linux and batch files for Windows that accomplish similar tasks on both Operating Systems, or just compile different binaries for each platform they wish to infect. The idea of doing multi-platform malware has been around for a long time. There was a paper written in the late 1990's detailing a worm that was platform-agnostic, used scripts to begin execution on the infected system, downloaded a binary payload and executed it, and then began attempting to replicate over the Internet.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.