--- title: New Ransomware Threat Emerges as a Scanned Document description: Learn about new ransomware threats targeting your business image: https://blog.techboston.com/hubfs/heat_map_IKARUSdilapidated_printer.jpg --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # New Ransomware Threat Emerges as a Scanned Document [Home](https://techboston.com) / New Ransomware Threat Emerges as a Scanned Document Return to Previous Page [![image-1](https://blog.techboston.com/hubfs/heat_map_IKARUSdilapidated_printer.jpg)](https://blog.techboston.com/hubfs/heat_map_IKARUSdilapidated_printer.jpg) [View large](https://blog.techboston.com/hubfs/heat_map_IKARUSdilapidated_printer.jpg) [Tech News](https://blog.techboston.com/tag/tech-news), [Food For Thought](https://blog.techboston.com/tag/food-for-thought) ### New Ransomware Threat Emerges as a Scanned Document [Cyberheist news says](https://blog.knowbe4.com/cyberheistnews-vol-7-39-new-evil-locky-ransomware-strain-evades-machine-learning-security-software):   Here is the latest tactic in the cat-and-mouse game between cybercrime and security software vendors. The bad guys have come up with new a ransomware phishing attack, tricking users to open what appears to be a document scanned from an internal Konica Minolta C224e. This is a variant of the Locky Ransomware that had affected computer users in the past. This model is one of the most popular business scanner/printers in the world. The emails are written to make the user think that the communication is from a vendor. The ransomware launched Sept. 18 and features a sophisticated new wrinkle, enabling it to slip past many of the machine learning algorithm-based software sold by some of the industry’s most popular vendors, said security firm Comodo. “The method of phishing is by an attachment of an email; the attachment is disguised as a printer output, and it contains a script inside an archive file,” said Fatih Orhan, vice president of Comodo Threat Research Labs. “These are not enough to make a phishing detection.” **This is the third recent massive Locky attack** The third in an increasingly sophisticated series of ransomware attacks launched this summer is dubbed IKARUS by Comodo, some other security vendors are calling it Locky Diablo6. As in previous attacks, the Eastern European Locky cyber mafia is using a botnet of zombie computers which makes it hard to simply block by IP. “Employees today scan original documents at the company scanner/printer and email them to themselves and others as a standard practice, so this malware-laden email looks quite innocent but is anything but harmless,” the report continues. The most innovative hook of this new feature involves the way these criminal hackers manage to evade spam filters. **Here is how it evades machine learning** “Machine learning algorithms need to extract the attachment, open the archive, extract the script and understand it has a malicious intent,” said Orhan, the Comodo research head. “But usually, these scripts contain just a download component and do not have malicious intent on their own.” “That’s why even machine learning is not sufficient in making these kind of detections,” he continued. “Complex solutions are needed to run the script dynamically, download actual payload, and perform malware analysis to conclude that it is phishing.” In other words, it looks like that again the bad guys are ahead of your spam filters, whether that is a traditional or new machine-learning flavor. Now, the Locky payload still ultimately uses an executable file written to disk, so your endpoint security may be able to block it. There are other types of attacks that take advantage of machine learning blind spots (fileless attacks, for example), but this isn't one of them. What the bad guys behind Locky count on is cranking out so many new variants that antivirus (even some machine learning ones) won't recognize and block it. **How vulnerable is your network against a ransomware attack?** Bad guys are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks? Ask us about an IT Security Assessment to see if your organization is protected. The best defense against Ransomware is having your workplace educated and informed of smart email security practices. Remember that if anything looks suspicious, it probably is. Don't click! Share Post - - - - - [mailto:?body=https://blog.techboston.com/new-ransomware-threat-emerges-scanned-document](mailto:?body=https://blog.techboston.com/new-ransomware-threat-emerges-scanned-document) [Previous](https://blog.techboston.com/consultant-can-benefit-non-profit) [![](https://blog.techboston.com/hubfs/John-gruener-video-shot.jpg) How an IT Consultant Can Benefit Your Nonprofit](https://blog.techboston.com/consultant-can-benefit-non-profit) [Next](https://blog.techboston.com/wisps-important-set) [![](https://blog.techboston.com/hubfs/IMG_0776.jpg) Why WISPs Are Important – and How to Set Them Up](https://blog.techboston.com/wisps-important-set) #### RELATED POSTS Tech Tips , Food For Thought , TNB Products and Services , IT security , IT security strategy , cybercrime , phishing , Security awareness , email security [![The top 5 reasons to start 2019 with an IT security strategy](https://blog.techboston.com/hs-fs/hubfs/it%20security%20strategy.png?width=387&name=it%20security%20strategy.png)](https://blog.techboston.com/top-5-reasons-start-2019-security-strategy) #### The top 5 reasons to start 2019 with an IT security strategy December 12, 2018 at 04:37 PM by Ashley Fontes … Tech Tips , Food For Thought #### 70+ free and low cost tools to help your nonprofit May 16, 2018 at 10:53 AM by Ashley Fontes … Food For Thought , TNB Products and Services [![10 Reasons to Take a Proactive Approach to IT Support](https://blog.techboston.com/hs-fs/hubfs/laptop-1385702_1920.jpg?width=387&name=laptop-1385702_1920.jpg)](https://blog.techboston.com/10-reasons-take-proactive-rather-break-fix-approach-support) #### 10 Reasons to Take a Proactive Approach to IT Support April 19, 2018 at 02:38 PM by Ashley Fontes … Food For Thought , TNB's Success [![How grant makers and recipients can do great things with data](https://blog.techboston.com/hs-fs/hubfs/analysis-blackboard-board-355952.jpg?width=387&name=analysis-blackboard-board-355952.jpg)](https://blog.techboston.com/grant-makers-nonprofit-grant-recipients-can-great-things-together-data-evaluation) #### How grant makers and recipients can do great things with data April 02, 2018 at 01:27 PM by Ashley Fontes … ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston