[Megan]

A new variant of the is now targeting vulnerable servers worldwide. As of the moment of writing, more than 600 servers have been infected. The good news is that we still can decrypt the files held at ransom for free.
But let’s backtrack a few weeks.

Read more here.

I was browsing reddit when I found this article and found it very interesting as most of the time the Ransomware I hear about is attacking windows, still a highly informative article, kinda funny how amateur it seems to be.

Spoiler:

Something you guys might be interested in reading so I have tagged you. @Skullmeat & @roger_smith, @Oni, @The Real Slim Shady

What are your thoughts on this? Amateur hackers? Or just an accidental coding problem? Or both?

[roger_smith]

I've seen some of this first hand on customer's servers. Not cool.

[Sans]

These guys suck.

Moreover, the new Linux.Encoder now does not statically link the libc library such that older systems (which are more likely to be vulnerable and thus more susceptible to getting infected) are not compatible with the ransomware and will fail to even start the program.

Really? Not even gonna cook your libs in so you know it'll run? What kind of 2-bit mass server infection isn't static x86 32-bit code!? You've gotta be high to make the mistakes these guys are making and still take yourself seriously.

[pvnk]

Amateur ransomeware exists because not everyone can be a prodigy developer like yourself.