Bravatek Solutions Inc (BVTK)

[shotsky]

Worms and bad web pages
Three years ago, I got hit with ransomware, but I caught it before it completed, and had full backups to restore things. It started by encrypting all the jpg files, then moved on to zip files, then other things. It was still running when I exited Windows and did a secure cleanup, using a different computer to get details.

The point is that I got this not from clicking on a bad link, but from visiting a web page I knew to be safe. The payload was in one of the video ads along the side. In order for you to SEE that ad on your computer, it has already downloaded to your computer and you see it from your own hard drive - that's how the web works, generally. So the ransomware 'trigger' was picked up by visiting a good web page with a bad ad, and not even clicking on the ad.
Just saying, that if that delivery mechanism was added to this new ransomware, anyone could get it simply by visiting a poisoned web page.
I keep my backup computers turned off, and force my network to use passwords to even talk to each other. I also have a spare boot drive and spare data drive that I can swap to get booted back up safely.