Top all-time · #3234
Bitdefender Labs
Company blog · labs.bitdefender.comsecurity
Bitdefender Labs is the company blog at labs.bitdefender.com, writing about security. Since 2012, 24 different Hacker News readers have linked it 26 times, most often “Linux Ransomware Debut Fails on Predictable Encryption Key”. No feed was found, so read it on the site itself.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Bitdefender Labs posts on ransomware and malware, such as DarkSide decryption, Linux Encoder and Zacinlo adware. Commenters mostly cite them as sources or supporting detail.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Daily source of cyber-threat information. Established 2001.
Most-linked posts?
- Linux Ransomware Debut Fails on Predictable Encryption Key4 people · 4 mentions · first linked 2015-11-11
- FLAME – Leaked Data Carried by Human Vector2 people · 2 mentions · first linked 2012-06-12
- Inside Netrepser – A JavaScript-Based Targeted Attack2 people · 2 mentions · first linked 2017-06-04
- Bitdefender finds a Hypervisor Wiretap to read TLS communications2 people · 2 mentions · first linked 2016-05-27
- Backdoor on OS X systems allows full access2 people · 2 mentions · first linked 2016-07-05
What Hacker News says?
* There exists a decryption tool for DarkSide https://labs.bitdefender.com/2021/01/darkside-ransomware-dec... * Critical infrastructure should not be allowed to run on Microsoft Windows * The remote workers, through which the attack was performed, didn't even use a VPN, just TeamViewer and MS Remote Desktop.
Comment linking /2021/01/darkside-ransomware-decryption-tool/
on “US passes emergency waiver over fuel pipeline cyber-attack”Submitted Inside the Million-Machine Clickfraud Botnet as a story · 67 points
HN discussionIt is worth noting that the 8.3 short name of the hidden file was HUB001.DAT[1]. This is because VFAT allows the specification of both a short name (8.3) and long name (LFN) for each file/directory. You can find 8.3 '.' entry names by searching a partition for \x2e\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20 A file with an LFN of '.' could be found with (hopefully this is correct) \x00\x2e\x00\x00\x00\x00\xff\xff\xff\xf…
Comment linking /2012/06/flame-the-story-of-leaked-data-carried-by-human-vector/
on “Flame is Lame ”Submitted Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft as a story · 18 points
HN discussionIt seems like some variant of the Linux.Encoder.1 (2015): http://www.zdnet.com/article/crypto-ransomware-strikes-linux... https://labs.bitdefender.com/2015/11/linux-ransomware-debut-... probably "python based" and, as mentioned on the gentoo forums, the ransomware mesage is very similar to the one in: https://github.com/jdsecurity/CryptoTrooper
Comment linking /2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/
on “Linux ransomware in the wild”Submitted Linux Ransomware Debut Fails on Predictable Encryption Key as a story · 11 points
HN discussionPreviously: https://news.ycombinator.com/item?id=10524791 tl;dr: if you run nearly-a-year-unpatched software (Magento) you will be hacked by script kiddies. This is a fairly competent article, other than the obviously click-bait title. Although the Bitdefender post linked as a source contains much more technical detail and less copy-paste tutorial: http://labs.bitdefender.com/2015/11/linux-ransomware-debut-f...
Comment linking /2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/
on “How to easily defeat Linux Encoder ransomware”Submitted Backdoor on OS X systems allows full access as a story · 7 points
HN discussionThis seems to be source for the article: https://labs.bitdefender.com/2018/06/six-years-and-counting-... (there is a PDF linked), no mention of surviving a format or clean reinstall.
Comment linking /2018/06/six-years-and-counting-inside-the-complex-zacinlo-ad-fraud-operation/
on “Zacinlo adware affecting Windows 10 Users”Submitted Linux Ransomware Debut Fails on Predictable Encryption Key as a story · 4 points
HN discussionSubmitted More Flaws in Guardzilla Cameras Allow Remote Hijack of the Security Device as a story · 3 points
HN discussionSubmitted Mandrake – owning Android devices since 2016 as a story · 2 points
HN discussionSubmitted “Hide N Seek” IoT Botnet Using Custom-Built P2P Communication as a story · 2 points
HN discussionSubmitted Massive GoldenEye ransomware campaign slams worldwide users as a story · 2 points
HN discussionSubmitted Inside Netrepser – A JavaScript-Based Targeted Attack as a story · 2 points
HN discussionSubmitted New Backdoor Allows Full Access to Mac Systems, Bitdefender Warns as a story · 2 points
HN discussionSubmitted Bitdefender finds a Hypervisor Wiretap to read TLS communications as a story · 2 points
HN discussionSubmitted Attackers Pose as Account Owners via Facebook Login Flaw as a story · 2 points
HN discussionSubmitted Linux Ransomware Debut Fails on Predictable Encryption Key as a story · 2 points
HN discussionSubmitted FLAME – Leaked Data Carried by Human Vector as a story · 2 points
HN discussionSubmitted Interplanetary Storm Botnet Shows Signs of Proxy-for-Hire Infrastructure as a story · 1 points
HN discussionSubmitted Hold My Beer Mirai – Spinoff Named ‘LiquorBot’ Incorporates Cryptomining as a story · 1 points
HN discussionSubmitted Bitdefender Solves GANDCRAB with Free Decryption Tool – Available Now as a story · 1 points
HN discussionSubmitted Inside Netrepser – A JavaScript-Based Targeted Attack as a story · 1 points
HN discussionSubmitted TeLeScope unveiled at Hack in the Box as a story · 1 points
HN discussionSubmitted KeRanger is actually a rewrite of Linux.Encoder as a story · 1 points
HN discussion
