<story><title>GoodWill ransomware forces victims to donate to the poor</title><url>https://cloudsek.com/threatintelligence/goodwill-ransomware-forces-victims-to-donate-to-the-poor-and-provides-financial-assistance-to-patients-in-need/</url></story><parent_chain><item><author>dontbenebby</author><text>Don&amp;#x27;t be dismissive of script kiddies, they can cause a lot of chaos, and often do it because they feel like no amount of self education or self improvement will improve their chances of stable full time employment.&lt;p&gt;(Hence many of them operating out of the former USSR.)</text></item><item><author>jeroenhd</author><text>I can see a younger version of myself making something like this and intentionally letting it slip to the media for attention. I th8nk this line is telling: &amp;quot;Since there are no known victims&amp;#x2F; targets for the ransomware group, their Tactics, Techniques and Procedures remain unknown.&amp;quot;&lt;p&gt;I don&amp;#x27;t think there&amp;#x27;s a risk if any great outbreak here. A bunch of scriptkiddies took some open source project and modified it with some silly instructions.&lt;p&gt;Alternatively, I could see this used in one of those scam calls. They set up remote accesslike normally and then months laltrr the6 infrct their victims and the &amp;quot;trusted Microsoft technician&amp;quot; gives them a call to steal even more off their money. This time there&amp;#x27;s an actual piece of malware that gets removed, solidifying trust in the scammers even though they were the ones to infect the victims in the first place.</text></item></parent_chain><comment><author>jeroenhd</author><text>They certainly can cause a lot of chaos. In fact, I&amp;#x27;d say that most malicious chaos normal internet users may be subjected to is done by these scriptkiddies.&lt;p&gt;Theres a difference, though, between an extensive ransomeware attack and an experiment by a bunch of amateurs. The chance of key recovery is much greater if there are dedicated criminals behind the attack, but amateurs also don&amp;#x27;t get the widespread reach that the media coverage might suggest.&lt;p&gt;I think the characterization of scriptkiddies as hopeless people is a bit romantic. I was something of a skiddie when I was young and I think a lot of their behaviour can be attributed to teenage recklessness.&lt;p&gt;The former USSR certainly has their fair share of scriptkiddies but they&amp;#x27;re around in every country. When the USSR was still around, the west had its fair share of phreakers that developed into the hacker subculture and established the code of honour that evolved into the cybersecurity communities of today.</text></comment>
<story><title>GoodWill ransomware forces victims to donate to the poor</title><url>https://cloudsek.com/threatintelligence/goodwill-ransomware-forces-victims-to-donate-to-the-poor-and-provides-financial-assistance-to-patients-in-need/</url></story><parent_chain><item><author>dontbenebby</author><text>Don&amp;#x27;t be dismissive of script kiddies, they can cause a lot of chaos, and often do it because they feel like no amount of self education or self improvement will improve their chances of stable full time employment.&lt;p&gt;(Hence many of them operating out of the former USSR.)</text></item><item><author>jeroenhd</author><text>I can see a younger version of myself making something like this and intentionally letting it slip to the media for attention. I th8nk this line is telling: &amp;quot;Since there are no known victims&amp;#x2F; targets for the ransomware group, their Tactics, Techniques and Procedures remain unknown.&amp;quot;&lt;p&gt;I don&amp;#x27;t think there&amp;#x27;s a risk if any great outbreak here. A bunch of scriptkiddies took some open source project and modified it with some silly instructions.&lt;p&gt;Alternatively, I could see this used in one of those scam calls. They set up remote accesslike normally and then months laltrr the6 infrct their victims and the &amp;quot;trusted Microsoft technician&amp;quot; gives them a call to steal even more off their money. This time there&amp;#x27;s an actual piece of malware that gets removed, solidifying trust in the scammers even though they were the ones to infect the victims in the first place.</text></item></parent_chain><comment><author>goshx</author><text>I’ve met tons of script kiddies over the years and none of them were concerned about employment. They do what they do just to show that they can.</text></comment>