Bug 701130

Summary:	NextCry ransomware that targets and encrypts www-apps/nextcloud
Product:	Gentoo Security	Reporter:	Neil <nshephard>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://linuxsecurity.com/features/features/nextcry-ransomware-targets-nextcloud-linux-servers-and-remains-undetected
Whiteboard:
Package list:		Runtime testing required:	---

Description Neil 2019-11-25 10:50:01 UTC

Read about this and thought it worth flagging up.

Report details mitigation strategies.

Don't use NextCloud myself.

Reproducible: Always

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2019-11-25 12:32:04 UTC

Not a bug in www-apps/{next,own}cloud.

According to current information, vector is CVE-2019-11043 which we track as bug 698452.