<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>Wrong. If you need to negotiate you deserve to lose. Be prepared, scouts motto ;)</div><div><br>On 23 Sep 2016, at 3:15 AM, Darren Ward (darrward) <<a href="mailto:darrward@cisco.com">darrward@cisco.com</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<div>A more worrying trend is that a number of newer ransomware apps also exfiltrates data from infected machines and networked volumes</div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">DLP technologies getting more critical all the time and for goodness sake lock down DNS! :)</div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">Which raises an interesting question - as technology and network providers should filtering of DNS to legit servers become the norm?<br>
<br>
Sent from my iPad</div>
<div><br>
On 22 Sep 2016, at 8:04 PM, Skeeve Stevens <<a href="mailto:skeeve+ausnog@eintellegonetworks.com">skeeve+ausnog@eintellegonetworks.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">What's wrong with negotiating? I've had a couple of customers talk down Ransomware attacks to about half the price.
<div><br>
</div>
<div>If you need the data (no backup, can't restore), what's the harm in asking?</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size:12.8000001907349px">
<div style="font-size:12.8000001907349px"><br>
...Skeeve</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">
<div><b style="font-size:13px;font-family:Calibri">Skeeve Stevens - Founder & The Architect</b><span style="font-family:Calibri;font-size:13px"> - eintellego Networks Pty Ltd</span></div>
<div><span style="font-size:13px;font-family:Calibri">Email: </span><a href="mailto:skeeve@eintellegonetworks.com" style="font-family:Calibri;font-size:13px" target="_blank">skeeve@eintellegonetworks.com</a><span style="font-family:Calibri;font-size:13px"> ;
Web: </span><a href="http://eintellegonetworks.com/" style="font-family:Calibri;font-size:13px" target="_blank">eintellegonetworks.com</a></div>
<div>
<p style="color:rgb(0,0,0);font-family:Calibri;font-size:13px;margin:0px">Cell +61 (0)414 753 383 ; S<a>kype: skeeve ; </a>LinkedIn: <a href="http://linkedin.com/in/skeeve" target="_blank">/in/skeeve</a> ; Expert360: <a href="https://expert360.com/profile/d54a9" target="_blank">Profile</a> ;
Keybase: <a href="https://keybase.io/skeeve" target="_blank">https://keybase.io/skeeve</a></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Thu, Sep 22, 2016 at 10:58 PM, Kristoffer Sheather @ CloudCentral
<span dir="ltr"><<a href="mailto:kristoffer.sheather@cloudcentral.com.au" target="_blank">kristoffer.sheather@cloudcentral.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span style="font-family:Arial,Helvetica,Sans-Serif;font-size:12px">
<div>Rule #1 - never negotiate with terrorists.</div>
<div> </div>
<hr align="center" size="2" width="100%">
<div><span style="font-family:tahoma,arial,sans-serif;font-size:10pt"><b>From</b>: "James Hodgkinson" <<a href="mailto:yaleman@ricetek.net" target="_blank">yaleman@ricetek.net</a>><br>
<b>Sent</b>: Thursday, September 22, 2016 10:56 PM<br>
<b>To</b>: "Michael Bullut" <<a href="mailto:main@kipsang.com" target="_blank">main@kipsang.com</a>>, "Australian Network Operators Mailing List" <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<b>Subject</b>: Re: [AusNOG] Ransomware...</span>
<div> </div>
<div>Nuke the machine, restore from backup.</div>
<div> </div>
<div>Pub?<br>
<br>
James</div>
<div> </div>
<div> </div>
<div>On Thu, 22 Sep 2016, at 22:45, Michael Bullut wrote:</div>
<blockquote type="cite">
<div dir="ltr">
<div style="font-family:arial,helvetica,sans-serif;font-size:small">Greetings Team,</div>
<div style="font-family:arial,helvetica,sans-serif;font-size:small"> </div>
<div><span style="font-family:arial," helvetica"," sans-serif"">Anyone that has succeeded in eradication without sending a ransom? </span></div>
<div style="font-family:arial,helvetica,sans-serif;font-size:small"> </div>
<div>
<div>
<div dir="ltr">
<div>Warm regards, </div>
<div> </div>
<div>Michael Bullut.</div>
<div> </div>
<div>---</div>
<div>
<div> </div>
<div><b>Cell:</b> <i>+254 723 393 114.</i><br>
<b>Skype Name:</b> <i>Michael Bullut.</i></div>
<div>
<div><b><span style="font-style:normal">Twitter:</span></b><i><span style="font-style:normal"><i><b>
</b><a href="http://twitter.com/Kipsang/" target="_blank">@Kipsang</a></i></span></i></div>
<div><b><span style="font-weight:normal"><i><span style="font-style:normal"><b>Blog: </b></span></i><i><a href="http://www.kipsang.com/" target="_blank">http://www.kipsang.com/</a></i></span></b></div>
<div>
<div><b>E-mail:</b> <i><a href="mailto:main@kipsang.com" target="_blank">main@kipsang.com</a></i></div>
<div> </div>
<div><i>---</i></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div><u>______________________________<wbr>_________________</u></div>
<div>AusNOG mailing list</div>
<div><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a></div>
<div><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/<wbr>mailman/listinfo/ausnog</a></div>
</blockquote>
<div> </div>
<p>Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.<br>
<a href="http://www.mailguard.com.au/mg" target="_blank">http://www.mailguard.com.au/mg</a></p>
<br>
<a href="https://console.mailguard.com.au/ras/1PiQVdD2wb/EO2vpAoqT19a9Dnr06wpm/0.212" target="_blank">Report this message as spam</a> <br>
<br>
</div>
</span><br>
______________________________<wbr>_________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/<wbr>mailman/listinfo/ausnog</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>_______________________________________________</span><br>
<span>AusNOG mailing list</span><br>
<span><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></span><br>
<span><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a></span><br>
</div>
</blockquote>
<br><p>Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.<br><a href="http://www.mailguard.com.au/mg">http://www.mailguard.com.au/mg</a></p>
<br><a href="https://console.mailguard.com.au/ras/1PiVwFloJr/6ZcfgWuZHgtA3bZuyuvAUd/0.202">Report this message as spam</a>
<!-- MailGuard Message ID: 57e411e82c2e89 - use this number for reporting -->
<br> <br></div></blockquote></body></html>