Protection against CryptoWall 4.0

[JonathanTorian_FTNT]

Hi FortiGuard Fuse Members,

I have a customer who recently reached out to me to inquire about the latest variant of CryptoWall (4.0).  I know we recently released an article around our detection with CryptoWall 3.0, but is there any updated information regarding CryptoWall 4.0?

Here is some literature I found on the subject:

http://www.fixedbyvonnie.com/2015/11/cryptolocker-new-and-improved-cryptowall-4-0/#.VkOTPfmrR1s

http://blog.varonis.com/beware-cryptowall-4-0-is-on-the-loose/

My customer is currently protected by a FortiGate (not inspecting SSL), FortiMail and FortiSandbox.  Is there any reassurance I can give him on our abilities to detect and mitigate this threat?

Thanks!

[jrockett_FTNT · Accepted solution]

They can set app control to monitor and block I2P (Similar to Tor) traffic which is used by the malware as an overlay network.

JR