Swift-based ransomware targets macOS pirates with false decryption promise

2»

Comments

  • Reply 21 of 26
    play with fire, you get burned.
     0Likes 0Dislikes 0Informatives
  • Reply 22 of 26
    MacPromacpro Posts: 19,873member
    " ... without any possibility of decrypting the files even if the ransom is paid"  hence In these situation always ask for 'proof of life' before paying.  I learned that watching TV ;)
    edited February 2017
     0Likes 0Dislikes 0Informatives
  • Reply 23 of 26
    volcanvolcan Posts: 1,799member
    Marvin said:

    When the content isn't encoded properly in the database, it converts specials characters to ? or something else. The problem usually happens due to the HTML editors as they have to get the content and allow it to be edited in the comments box.
    @marvin

    In that case the easiest way to fix the problem is to use the PHP function (htmlentities) in the original article. That way the special characters are already converted to their html entities before the string is inserted into the forum database.
     0Likes 0Dislikes 0Informatives
  • Reply 24 of 26


    The researcher notes the malware is "generally poorly coded" in a number of ways. 
    Oh, crap, is my El Capitan version, downloaded straight from Apple, a virus now?  :p


     0Likes 0Dislikes 0Informatives
  • Reply 25 of 26
    Marvin said:

    linkman said:
    Apparently the ransomware writers didn't take heed in that they need to provide great customer service to make money: http://www.pcworld.com/article/3097268/security/why-ransomware-criminals-need-great-customer-service.html

    I also get the ? problem on the accented e on Windows 10 using Chrome in the forum only.
    Perhaps the pages need some sort of character set indentifer in their meta tags. 
    This has been a problem with a few of the forum software platforms used. They have to copy the articles from the home page into the forum software. When the content isn't encoded properly in the database, it converts specials characters to ? or something else. The problem usually happens due to the HTML editors as they have to get the content and allow it to be edited in the comments box.

    The format would be retained by manually copy/pasting the article into a new forum thread. The following is copy/pasted from the article and the accented characters work ok:

    "Researcher Marc-Etienne M.Léveillé found two different that used the same code"

    It may even be better to copy the HTML source from the article page into the plain text part of the editor using the Toggle HTML View button but the article's images use lazy loading (only loads images after you scroll over them) so it won't copy embedded images over, they'd have to be fixed manually. They can be dragged into place from the article. The main article uses htmlentity encoding for special characters, if you copy Léveillé into the following page and hit the button to encode it, it shows how it's stored in the database:

    http://www.freeformatter.com/html-escape.html

    There's most likely an automated button to copy it directly to the forum. The function that does that would have to run it through the same forum process that encodes comments first.
    I don't know much about your forum platform but had thought you may be running your own custom forum code (sounds like not). In my apps we store rich comments/narrative text in a SQL datatype that supports unicode characters, then render them back into the final page's content like your main stories likely do. I had figured your forum pages would just retrieve the same exact content rather than copy it into a separate forum database or whatnot, but sounds like that isn't how it works. In any event, hopefully they figure it out. 
    edited February 2017
     0Likes 0Dislikes 0Informatives
  • Reply 26 of 26

    Looks normal to me. It's a lowercase e with a slanted line over it that the French use. I'd cut and paste it here for you, but you obviously can't see it. Must have something to do with the fonts on your Mac. I have the standard assortment of fonts and the special e rendered fine for me. Good luck.
    Hey, does anybody else often see strange characters in AI stories such as these:

                  

    ...guessing they want to be single quotes? I'm on macOS via Safari.
    Nah, it doesn't have anything to do with typefaces on my client. It's not being rendered in the story itself here in the forums.
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.