[Samba] CryptoLocker
Jeremy Allison
jra at samba.org
Wed Apr 1 13:32:28 MDT 2015
On Wed, Apr 01, 2015 at 01:04:42PM -0500, John Schmerold john at katy.com KatyComputerSystems wrote:
> For a CryptoLocker infection to be successful, a few things must be
> occur including:
> 1) No backup
>
> 2) Many files need to be encrypted
>
> Has anyone developed a Samba plugin to prevent successful
> CryptoLocker infections by shutting down Samba when an unusual
> number of data files are modified by a specific workstation?
Not to my knowledge, but the Samba VFS API is easy enough
to code to that there are probably lots of site-specific
VFS modules that people use.
More information about the samba
mailing list