{"id":2348,"date":"2019-01-17T10:33:12","date_gmt":"2019-01-17T10:33:12","guid":{"rendered":"https:\/\/www.varutra.com\/blog\/?p=1816"},"modified":"2022-12-13T08:19:10","modified_gmt":"2022-12-13T02:49:10","slug":"security-advisory-ransomware-attack-targeting-china-december-2018","status":"publish","type":"post","link":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/","title":{"rendered":"Security Advisory &#8211; Ransomware Attack Targeting China &#8211; December 2018"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/varutra-1a3b6.kxcdn.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg\"  class=\"sh-overlay-item sh-table-cell ls-is-cached lazyloaded\" data-rel=\"lightcase\" title=\"RansomwareattackDecember2018 - Varutra Consulting\"><br \/>\n<strong>Ransomware Attack Targeting China &#8211; Security Advisory\u00a0<\/strong><\/p>\n<h3><strong>1. Ransomware through Supply Chain Attack:<\/strong><\/h3>\n<ul>\n<li>A new ransomware strain spreading as a result of supply chain attack targeting Chinese users starting from December 1 and infected more than 100,000 computers.<\/li>\n<li>The ransomware not only encrypting the system files, but it is also capable of stealing login credentials of popular Chinese online services such as Taobao, Baidu Cloud, NetEase 163, Tencent QQ, Jingdong, and Alipay.<\/li>\n<li>Velvet security researchers who analyzed the ransomware variant found that the attackers added malicious code to \u201c<strong>Easy language<\/strong>\u201d programming software and the malicious code will be injected to various other software compiled with it.<\/li>\n<li>In total more than 50 software poisoned with the malicious code, and the ransomware operators using Chinese social networking Douban for C&amp;C communication. The Ransomware also tracks the details of the software installed on the victim\u2019s computer.<\/li>\n<li>It encrypts data using a less secure <strong>XOR cipher<\/strong> and stores a copy of the decryption key locally on the victim&#8217;s system itself in a folder at following location: <strong>%user%\\AppData\\Roaming\\unname_1989\\dataFile\\appCfg.cfg<\/strong><\/li>\n<\/ul>\n<p><em><a href=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Executable-files-modified-through-supply-chain-attack.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1817 size-full\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Executable-files-modified-through-supply-chain-attack.png\" alt=\"Executable files modified through Supply Chain Ransomware Attack\" width=\"696\" height=\"365\" \/><\/a><\/em><\/p>\n<p style=\"text-align: center\"><em>Fig: Executable files modified through Supply Chain Attack<\/em><\/p>\n<p>&nbsp;<\/p>\n<h3 style=\"text-align: left\"><strong>2. Targeted User Information:<\/strong><\/h3>\n<ul>\n<li style=\"text-align: left\">System version information, current system login username, system login time<\/li>\n<li style=\"text-align: left\">CPU model.<\/li>\n<li style=\"text-align: left\">Screen resolution.<\/li>\n<li style=\"text-align: left\">IP and broadband provider name.<\/li>\n<li style=\"text-align: left\">Software installation information.<\/li>\n<li style=\"text-align: left\">Security software process information.<\/li>\n<li style=\"text-align: left\">Online shopping account login information, email login information, QQ number login information, network disk login information, etc.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><span style=\"font-size: 18.72px\"><b>3.\u00a0<\/b><\/span><strong>PoC Of Virus module names:<\/strong><strong><br \/>\n<a href=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/List-of-virus-module-names.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1819 size-full\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/List-of-virus-module-names.png\" alt=\"List of Virus Module\" width=\"696\" height=\"311\" \/><\/a><\/strong><\/h3>\n<p>&nbsp;<\/p>\n<h3><strong>4.\u00a0Ransomware Entry point<\/strong>:<\/h3>\n<ul>\n<li><strong>Phishing Email<\/strong> &#8211; A user will receive an Email with malicious Link in the body<\/li>\n<li><strong>Email Attachments<\/strong> &#8211; A user will receive an Email with an Attached Innocent<\/li>\n<li><strong>Embedded Hyperlink<\/strong> &#8211; A Malicious Document Contains Embedded Hyperlink<\/li>\n<li><strong>Websites &amp; Downloads<\/strong> &#8211; A Users Browser the infected site and Compromised website and download a software.<\/li>\n<li><strong>Drive by Infection<\/strong> &#8211; A User Browser with old Browser, Malicious plug-in, an unpatched third-party application.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><strong>5.\u00a0Preparation and Mitigation<\/strong>:<\/h3>\n<ul>\n<li>Take regular backups of your data.<\/li>\n<li>Don\u2019t download the software called \u201cEasyLanguage\u201d.<\/li>\n<li>Enable Windows 10 Ransomware Protection\/ Controlled Folder Access.<\/li>\n<li>One of the main infection vectors is Microsoft office document so make sure your Microsoft office Macros are disabled by<\/li>\n<li>Keep the Firewall up to date to block suspicious<\/li>\n<li>Scan all your emails for malicious links, content, and<\/li>\n<li>Make sure that Sophos anti-virus protection is up to date and enabled in all the<\/li>\n<li>Don\u2019t Provide local administrator rights by default, also avoid high privilege by<\/li>\n<li>Enforce access control permission for the concerned user and allow them to access the files which they actually needed to access for their work.<\/li>\n<li>Provide proper training for your employees about ransomware attack. Educate the users to not open suspicious links.<\/li>\n<li>Block the Ads and unnecessary web content using Ad-Blocker and Proxy\/Firewall<\/li>\n<li>Always download the software\u2019s from trusted websites.<\/li>\n<li>As mentioned, it encrypts data using a less secure XOR cipher. So, In case of attack, Velvet security team created and released a free ransomware decryption tool that can easily unlock encrypted files for victims without requiring them to pay any ransom. URL: <a href=\"https:\/\/www.huorong.cn\/download\/tools\/HRDecrypter.exe\">https:\/\/www.huorong.cn\/download\/tools\/HRDecrypter.exe<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><em>Author,<\/em><\/p>\n<p><strong><em>Goutham Korepu<\/em><\/strong><\/p>\n<p><em>SOC Team<\/em><\/p>\n<p><em>Varutra Consulting Pvt. Ltd.<\/em><\/p>\n<p>&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Ransomware Attack Targeting China &#8211; Security Advisory\u00a0 1. Ransomware through Supply Chain Attack: A new ransomware strain spreading as a result of supply chain attack&#8230;<\/p>\n","protected":false},"author":3,"featured_media":2977,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[269,270,288,266,280],"tags":[184,185,186,104,187,188,189],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.6.3 - aioseo.com -->\n\t\t<meta name=\"description\" content=\"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.\" \/>\n\t\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t\t<link rel=\"canonical\" href=\"https:\/\/www.varutra.com\/security-advisory-ransomware-attack-targeting-china-december-2018\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.6.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Varutra Consulting\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Ransomware Attack Targeting China - Security Advisory\" \/>\n\t\t<meta property=\"og:description\" content=\"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.varutra.com\/security-advisory-ransomware-attack-targeting-china-december-2018\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t\t<meta property=\"og:image:height\" content=\"582\" \/>\n\t\t<meta property=\"article:section\" content=\"Data Breaches\" \/>\n\t\t<meta property=\"article:tag\" content=\"china\" \/>\n\t\t<meta property=\"article:tag\" content=\"china ransomware attack\" \/>\n\t\t<meta property=\"article:tag\" content=\"december 2018\" \/>\n\t\t<meta property=\"article:tag\" content=\"ransomware\" \/>\n\t\t<meta property=\"article:tag\" content=\"ransomware attack\" \/>\n\t\t<meta property=\"article:tag\" content=\"ransomware attack targeting china\" \/>\n\t\t<meta property=\"article:tag\" content=\"supply chain attack\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-01-17T10:33:12+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-12-13T02:49:10+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Ransomware Attack Targeting China - Security Advisory\" \/>\n\t\t<meta name=\"twitter:description\" content=\"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"kalpadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#article\",\"name\":\"Ransomware Attack Targeting China - Security Advisory\",\"headline\":\"Security Advisory &#8211; Ransomware Attack Targeting China &#8211; December 2018\",\"author\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/admin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/Ransomware-attack-December-2018-1.jpg\",\"width\":800,\"height\":582,\"caption\":\"Ransomware-attack-December-2018\"},\"datePublished\":\"2019-01-17T10:33:12+05:30\",\"dateModified\":\"2022-12-13T08:19:10+05:30\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#webpage\"},\"articleSection\":\"Data Breaches, Data Leakage, Ransomware Attack, Security Advisory, Viruses &amp; Malware, China, China Ransomware Attack, December 2018, Ransomware, Ransomware Attack, Ransomware attack targeting china, Supply chain attack\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/\",\"nextItem\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#listItem\"},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#listItem\",\"position\":2,\"name\":\"Security Advisory - Ransomware Attack Targeting China - December 2018\",\"previousItem\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#listItem\"}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\",\"name\":\"Varutra\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Varutra-Found-e1612984024606.jpg\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/admin\\\/#author\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/admin\\\/\",\"name\":\"kalpadmin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d69b4bf504d3e2e3c6ad0c424e16bcb2?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"kalpadmin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#webpage\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/\",\"name\":\"Ransomware Attack Targeting China - Security Advisory\",\"description\":\"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/admin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/admin\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/Ransomware-attack-December-2018-1.jpg\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#mainImage\",\"width\":800,\"height\":582,\"caption\":\"Ransomware-attack-December-2018\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/security-advisory-ransomware-attack-targeting-china-december-2018\\\/#mainImage\"},\"datePublished\":\"2019-01-17T10:33:12+05:30\",\"dateModified\":\"2022-12-13T08:19:10+05:30\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#website\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/\",\"name\":\"Varutra Consulting\",\"description\":\"Secure your digital world with our Cybersecurity services.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Ransomware Attack Targeting China - Security Advisory<\/title>\n\n","aioseo_head_json":{"title":"Ransomware Attack Targeting China - Security Advisory","description":"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.","canonical_url":"https:\/\/www.varutra.com\/security-advisory-ransomware-attack-targeting-china-december-2018\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"og:locale":"en_US","og:site_name":"Varutra Consulting","og:type":"article","og:title":"Ransomware Attack Targeting China - Security Advisory","og:description":"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.","og:url":"https:\/\/www.varutra.com\/security-advisory-ransomware-attack-targeting-china-december-2018\/","og:image":"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","og:image:secure_url":"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","og:image:width":"800","og:image:height":"582","article:section":"Data Breaches","article:tag":["china","china ransomware attack","december 2018","ransomware","ransomware attack","ransomware attack targeting china","supply chain attack"],"article:published_time":"2019-01-17T10:33:12+00:00","article:modified_time":"2022-12-13T02:49:10+00:00","twitter:card":"summary_large_image","twitter:title":"Ransomware Attack Targeting China - Security Advisory","twitter:description":"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.","twitter:image":"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","twitter:label1":"Written by","twitter:data1":"kalpadmin","twitter:label2":"Est. reading time","twitter:data2":"3 minutes","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#article","name":"Ransomware Attack Targeting China - Security Advisory","headline":"Security Advisory &#8211; Ransomware Attack Targeting China &#8211; December 2018","author":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/admin\/#author"},"publisher":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","width":800,"height":582,"caption":"Ransomware-attack-December-2018"},"datePublished":"2019-01-17T10:33:12+05:30","dateModified":"2022-12-13T08:19:10+05:30","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#webpage"},"isPartOf":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#webpage"},"articleSection":"Data Breaches, Data Leakage, Ransomware Attack, Security Advisory, Viruses &amp; Malware, China, China Ransomware Attack, December 2018, Ransomware, Ransomware Attack, Ransomware attack targeting china, Supply chain attack"},{"@type":"BreadcrumbList","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/#listItem","position":1,"name":"Home","item":"https:\/\/www.varutra.com\/varutravrt3\/","nextItem":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#listItem"},{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#listItem","position":2,"name":"Security Advisory - Ransomware Attack Targeting China - December 2018","previousItem":"https:\/\/www.varutra.com\/varutravrt3\/#listItem"}]},{"@type":"Organization","@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization","name":"Varutra","url":"https:\/\/www.varutra.com\/varutravrt3\/","logo":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/wp-content\/uploads\/2021\/11\/Varutra-Found-e1612984024606.jpg","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#organizationLogo"},"image":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/admin\/#author","url":"https:\/\/www.varutra.com\/varutravrt3\/author\/admin\/","name":"kalpadmin","image":{"@type":"ImageObject","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/d69b4bf504d3e2e3c6ad0c424e16bcb2?s=96&d=mm&r=g","width":96,"height":96,"caption":"kalpadmin"}},{"@type":"WebPage","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#webpage","url":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/","name":"Ransomware Attack Targeting China - Security Advisory","description":"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#website"},"breadcrumb":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#breadcrumblist"},"author":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/admin\/#author"},"creator":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/admin\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#mainImage","width":800,"height":582,"caption":"Ransomware-attack-December-2018"},"primaryImageOfPage":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/#mainImage"},"datePublished":"2019-01-17T10:33:12+05:30","dateModified":"2022-12-13T08:19:10+05:30"},{"@type":"WebSite","@id":"https:\/\/www.varutra.com\/varutravrt3\/#website","url":"https:\/\/www.varutra.com\/varutravrt3\/","name":"Varutra Consulting","description":"Secure your digital world with our Cybersecurity services.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization"}}]}},"aioseo_meta_data":{"post_id":"2348","title":"Ransomware Attack Targeting China - Security Advisory","description":"A new ransomware strain spreading as a result of supply chain ransomware attack targeting Chinese users starting from and infected more than 100,000 computers.","keywords":[],"keyphrases":"{\"focus\":{\"keyphrase\":\"Ransomware\",\"score\":90,\"analysis\":{\"keyphraseInTitle\":{\"title\":\"Focus keyphrase in SEO title\",\"description\":\"Focus keyphrase found in SEO title.\",\"score\":9,\"maxScore\":9,\"error\":0},\"keyphraseInDescription\":{\"title\":\"Focus keyphrase in meta description\",\"description\":\"Focus keyphrase found in meta description.\",\"score\":9,\"maxScore\":9,\"error\":0},\"keyphraseLength\":{\"title\":\"Focus keyphrase length\",\"description\":\"Good job!\",\"score\":9,\"maxScore\":9,\"error\":0,\"length\":1},\"keyphraseInURL\":{\"title\":\"Focus keyphrase in URL\",\"description\":\"Focus keyphrase used in the URL.\",\"score\":5,\"maxScore\":5,\"error\":0},\"keyphraseInIntroduction\":{\"title\":\"Focus keyphrase in introduction\",\"description\":\"Your Focus keyphrase does not appear in the first paragraph. Make sure the topic is clear immediately.\",\"score\":3,\"maxScore\":9,\"error\":1},\"keyphraseInSubHeadings\":{\"title\":\"Focus keyphrase in Subheadings\",\"description\":\"Your H2 and H3 subheadings reflects the topic of your copy. Good job!\",\"score\":9,\"maxScore\":9,\"error\":0},\"keyphraseInImageAlt\":{\"title\":\"Focus keyphrase in image alt attributes\",\"description\":\"Focus keyphrase found in image alt attribute(s).\",\"score\":9,\"maxScore\":9,\"error\":0}}},\"additional\":[{\"keyphrase\":\"Ransomware Attack\",\"score\":83,\"analysis\":{\"keyphraseInDescription\":{\"title\":\"Keyphrase in meta description\",\"description\":\"Keyphrase found in meta description.\",\"score\":9,\"maxScore\":9,\"error\":0},\"keyphraseLength\":{\"title\":\"Keyphrase length\",\"description\":\"Good job!\",\"score\":9,\"maxScore\":9,\"error\":0,\"length\":2},\"keyphraseInIntroduction\":{\"title\":\"Keyphrase in introduction\",\"description\":\"Your Keyphrase does not appear in the first paragraph. Make sure the topic is clear immediately.\",\"score\":3,\"maxScore\":9,\"error\":1},\"keyphraseInImageAlt\":{\"title\":\"Keyphrase in image alt attributes\",\"description\":\"Keyphrase found in image alt attribute(s).\",\"score\":9,\"maxScore\":9,\"error\":0}}}]}","primary_term":null,"canonical_url":"https:\/\/www.varutra.com\/security-advisory-ransomware-attack-targeting-china-december-2018\/","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"featured","og_image_url":"https:\/\/www.varutra.com\/wp-content\/uploads\/2019\/01\/Ransomware-attack-December-2018-1.jpg","og_image_width":"800","og_image_height":"582","og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":"Data Breaches","og_article_tags":[],"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":"{\"article\":{\"articleType\":\"BlogPosting\"},\"course\":{\"name\":\"\",\"description\":\"\",\"provider\":\"\"},\"faq\":{\"pages\":[]},\"product\":{\"reviews\":[]},\"recipe\":{\"ingredients\":[],\"instructions\":[],\"keywords\":[]},\"software\":{\"reviews\":[],\"operatingSystems\":[]},\"webPage\":{\"webPageType\":\"WebPage\"}}","pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"open_ai":null,"created":"2021-10-27 15:16:26","updated":"2022-12-13 03:01:09"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.varutra.com\/varutravrt3\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.varutra.com\/varutravrt3\/category\/data-breaches\/\" title=\"Data Breaches\">Data Breaches<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tSecurity Advisory \u2013 Ransomware Attack Targeting China \u2013 December 2018\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.varutra.com\/varutravrt3"},{"label":"Data Breaches","link":"https:\/\/www.varutra.com\/varutravrt3\/category\/data-breaches\/"},{"label":"Security Advisory &#8211; Ransomware Attack Targeting China &#8211; December 2018","link":"https:\/\/www.varutra.com\/varutravrt3\/security-advisory-ransomware-attack-targeting-china-december-2018\/"}],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/2348"}],"collection":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/comments?post=2348"}],"version-history":[{"count":6,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/2348\/revisions"}],"predecessor-version":[{"id":20349,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/2348\/revisions\/20349"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/media\/2977"}],"wp:attachment":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/media?parent=2348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/categories?post=2348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/tags?post=2348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}